From 6ead07550059c14306f2c74c564b23793f033bb8 Mon Sep 17 00:00:00 2001
From: Bryce Kwon <bryce@brycekwon.com>
Date: Fri, 14 Aug 2026 13:06:45 -1000
Subject: Drop the Last-Modified, Expires and ETag headers

---
 custom/servers/apache.conf | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

(limited to 'custom/servers/apache.conf')

diff --git a/custom/servers/apache.conf b/custom/servers/apache.conf
index 7ff3bab..4345a9e 100644
--- a/custom/servers/apache.conf
+++ b/custom/servers/apache.conf
@@ -135,7 +135,11 @@ AddType text/plain               .txt
     AllowOverride None
     Require all granted
 
-    # These assets rarely change, so let browsers cache them.
+    # These assets rarely change, so let browsers cache them. Keep the
+    # caching scoped to this directory. cgit sends no caching headers of its
+    # own, so a server-wide ExpiresDefault would stamp freshness onto its
+    # pages, fight the no-store cgit puts on the login page, and could let
+    # one visitor's page be served to another from a shared cache.
     <IfModule mod_expires.c>
         ExpiresActive On
         ExpiresDefault "access plus 30 days"
-- 
cgit v2.8.0