diff --git a/deploy/env/prod/system.yaml b/deploy/env/prod/system.yaml
index 4244eb6..a859bf9 100644
--- a/deploy/env/prod/system.yaml
+++ b/deploy/env/prod/system.yaml
@@ -18,3 +18,21 @@ twig:
   cache: true
   debug: false
   auto_reload: false
+
+# Compression / connection handling.
+#
+# This host is not FastCGI (no fastcgi_finish_request()), so Grav's shutdown
+# "early connection close" falls back to emitting `Content-Encoding: identity`
+# to ask the webserver not to compress. But Apache's mod_deflate compresses
+# anyway and adds `Content-Encoding: gzip`, giving TWO conflicting headers —
+# the browser can't decode the body and renders raw gzip bytes (a garbage
+# page). Note: allow_webserver_gzip:true takes the SAME identity branch, so it
+# does not help. The real fix is to disable the early-close path, so Grav never
+# emits the bogus header and mod_deflate compresses cleanly (single header).
+debugger:
+  shutdown:
+    close_connection: false
+# Let the webserver own gzip; Grav does not compress or double-label.
+cache:
+  gzip: false
+  allow_webserver_gzip: false