manifests/webpage: nginx gzip for text (R-931); a pod annotation so the subPath config reloads on sync

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

manifests/webpage.yaml

@@ -58,6 +58,15 @@ data:
         root /usr/share/nginx/html/current/website;
         index index.html;
 
+        # R-931 (2026-10-12): compress text. Measured before: site.css went out as 114 784 raw bytes, no
+        # Content-Encoding. text/html is always compressed once gzip is on; the list adds the rest.
+        gzip on;
+        gzip_comp_level 5;
+        gzip_min_length 1024;
+        gzip_vary on;
+        gzip_proxied any;
+        gzip_types text/css application/javascript text/javascript application/json image/svg+xml text/plain application/xml;
+
         # Enable clean URLs - serve .html files without extension
         location / {
             try_files $uri $uri.html $uri/ =404;
@@ -244,6 +253,10 @@ spec:
     metadata:
       labels:
         app: felhom-webpage
+      annotations:
+        # The nginx config is mounted with subPath, which never refreshes in a running pod: bump this when
+        # the nginx-config ConfigMap changes, so the sync restarts the pod onto it.
+        felhom.eu/nginx-config-rev: "2026-10-12-gzip"
     spec:
       containers:
         - name: nginx