3 Commits

Include renames

Author	SHA1	Message	Date
openhands	3c8abb6fbf	feat(assets): choose furniture bundle ext via FURNI_BUNDLE_EXT ... Bundle the remaining imaging hardening and the host/CI fixes from the "Doe alles" pass into one release. Furniture: - Resolve the local bundle extension from FURNI_BUNDLE_EXT (".hab" default, ".nitro" for a stock Nitro client). The configured extension is written by imports/repairs and preferred on lookup; the other stays a legacy fallback. Imaging: - Avatar proxy sends s-maxage=86400 + stale-while-revalidate (300/3600 for the fallback path) so the edge can hold a render a day. - Cloudflare cache rule now covers /api/imaging/ (verified MISS->HIT live). - Document that bare /imaging is shadowed by the edge proxy to the renderer. Ops/CI: - docker-update.sh skips a CI-managed host (exit 0) instead of failing cron. - ci-deploy.sh runs the cross-browser imaging gate (chromium+firefox+webkit) against the candidate before cutover; DEPLOY_SKIP_CROSS_BROWSER=1 as escape. - scripts/imager-health-alert.sh alerts (Discord) on imager up/down transitions; runs from cron every 5 minutes. Tests: - Furniture bundle-ext resolver + FURNI_BUNDLE_EXT wiring. - Imaging performance budget (bytes + warm latency). - classifyDdos: /api/imaging/* stays in the api bucket.	2026-10-14 21:46:56 +02:00
openhands	8a6d92afd8	fix(cloudflare): cache the gamedata tree at the edge with respect_origin ... Icons are plain .png, a cacheable extension by default, so the zone's "Browser Cache TTL = 1 year" pinned them to max-age=31536000 regardless of the 300/3600/604800 that nginx sends per class. Extend the edge rule to /gamedata/ and keep respect_origin, so the nginx header wins and a 404 (notably no-store from the gamedata 404 handler) is never pinned.	2026-10-01 18:00:48 +02:00
openhands	7697728d07	feat(cache): single-owner caching across nginx, edge and content edits ... Rebuild production nginx from the repo (deployment/proxy/*) with a single Cache-Control owner per route: the app stays the source, nginx only manages headers, and Cloudflare stores the public API allowlist at the edge. - deployment/proxy: nginx.conf, mime.types, nginx-cms.conf and the blue/green upstream snippet; config backed by scripts/nginx-sync.sh (idempotent install + reload, --check/--force). - nginx serves Cache-Tag headers on the public allowlist (cms-public), gamedata, client and camera responses so the edge and purge stay in sync. - src/lib/edge-cache.ts + tests: coalesced, fire-and-forget edge purges that no-op unless Cloudflare is configured; scripts/cf-purge.sh and cf-setup-cache.sh create and purge the cache rule. - src/lib/cloudflare-api.ts: purgeCacheByTags/purgeCacheByUrls. - Purge hooks after catalog exports (public + gamedata) and on shop, team, guild, photo and rare-values edits; ci-deploy purges after each release. - src/proxy.ts excludes the imaging/images docs from the middleware matcher.	2026-09-28 21:55:18 +02:00