Add more mime types to be gzipped based on CloudFlare, hide powered-by headers

Author: TrafeX

config/nginx.conf

@@ -7,6 +7,7 @@ events {
 
 http {
     include mime.types;
+    # Threat files with a unknown filetype as binary
     default_type application/octet-stream;
 
     log_format  main_timed  '$remote_addr - $remote_user [$time_local] "$request" '
@@ -19,14 +20,18 @@ http {
 
     keepalive_timeout 65;
 
+    # Hide headers that identify the server to prevent information leakage
+    proxy_hide_header X-Powered-By;
+    fastcgi_hide_header X-Powered-By;
     server_tokens off;
 
     # Enable gzip compression
     gzip on;
     gzip_disable "msie6";
     gzip_proxied any;
-
-    gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript;
+    # Based on CloudFlare's recommended settings
+    gzip_types text/richtext text/plain text/css text/x-script text/x-component text/x-java-source text/x-markdown application/javascript application/x-javascript text/javascript text/js image/x-icon image/vnd.microsoft.icon application/x-perl application/x-httpd-cgi text/xml application/xml application/rss+xml application/vnd.api+json application/x-protobuf application/json multipart/bag multipart/mixed application/xhtml+xml font/ttf font/otf font/x-woff image/svg+xml application/vnd.ms-fontobject application/ttf application/x-ttf application/otf application/x-otf application/truetype application/opentype application/x-opentype application/font-woff application/eot application/font application/font-sfnt application/wasm application/javascript-binast application/manifest+json application/ld+json application/graphql+json application/geo+json;
+    gzip_vary on;
 
     # Forward the cloudfront scheme from upstream
     map "$http_cloudfront_forwarded_proto$http_x_forwarded_proto" $forwarded_scheme {