I need to disable gzip so my website can pass a vulnerability scan. I have it disable on my webserver, but it seem that by using cloudflare is turn on automatically on the response-headers. I disabled Brotli but gzip still there.
I have an identical machine that I can turn gzip and and off easily on nginx.conf. but as soos as it uses cloudflare the gzip goes back on.