femiwiki / caddy-mwcache

:wrench: Caddy anonymous cache plugin for MediaWiki

femiwiki

This is an issues-only repo for Femiwiki.

caddy-mwcache's Issues

mwcache로 이름 변경

wm는 위키미디어의 줄임말로 주로 위키미디어 재단과 그 사이트들(위키백과 등)에 관련된 경우에 자주 쓰는 접두사입니다. 아닌 경우는 지금 생각나는 건 wvui 정도...?
이 모듈처럼 미디어위키와 관련된 경우는 mw를 쓰는 게 더 적절해보이는데 어떨까요?

• Wikimedia에서 wm 검색 결과: https://github.com/wikimedia/?q=wm
• Wikimedia에서 mw 검색 결과: https://github.com/wikimedia/?q=mw

@simnalamburt

Styles are broken sometimes

Maybe the log is:

$ curl -Lv 'https://femiwiki.com/load.php?lang=ko&modules=ext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cmediawiki.widgets.styles%7Coojs-ui-core.icons%2Cstyles%7Coojs-ui.styles.icons-interactions%2Cindicators%7Cskins.femiwiki%7Cskins.femiwiki.xeicon%7Cwikibase.client.data-bridge.externalModifiers%7Cwikibase.client.init&only=styles&skin=femiwiki'
*   Trying 54.249.101.219:443...
* Connected to femiwiki.com (54.249.101.219) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_128_GCM_SHA256
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=femiwiki.com
*  start date: May 11 08:37:14 2021 GMT
*  expire date: Aug  9 08:37:14 2021 GMT
*  subjectAltName: host "femiwiki.com" matched cert's "femiwiki.com"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x5573c270d580)
> GET /load.php?lang=ko&modules=ext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cmediawiki.widgets.styles%7Coojs-ui-core.icons%2Cstyles%7Coojs-ui.styles.icons-interactions%2Cindicators%7Cskins.femiwiki%7Cskins.femiwiki.xeicon%7Cwikibase.client.data-bridge.externalModifiers%7Cwikibase.client.init&only=styles&skin=femiwiki HTTP/2
> Host: femiwiki.com
> user-agent: curl/7.74.0
> accept: */*
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* Connection state changed (MAX_CONCURRENT_STREAMS == 250)!
< HTTP/2 304 
< access-control-allow-origin: *
< cache-control: public, max-age=180, s-maxage=180
< date: Tue, 15 Jun 2021 15:00:22 UTC
< etag: W/"1eg59"
< expires: Tue, 15 Jun 2021 15:03:22 GMT
< server: Caddy
< status: 304 Not Modified
< strict-transport-security: max-age=31536000; includeSubDomains; preload
< x-content-type-options: nosniff
< x-content-type-options: nosniff
< x-frame-options: DENY
< x-powered-by: PHP/7.4.16
< x-request-id: 330165cc5c92c93d47661d88
< x-xss-protection: 1; mode=block
< 
* Connection #0 to host femiwiki.com left intact
*

Don't cache cookie requests

https://github.com/wikimedia/puppet/blob/120dff458fea24318bbcb31b457b5b7d113e66a9/modules/varnish/templates/misc-frontend.inc.vcl.erb#L41-L49

Development mode of xcaddy fails

Running xcaddy in development mode fails due to caddyserver/xcaddy#68

Support for distributed cache

Sometimes octet-stream is served

$ curl -Lv 'https://femiwiki.com/load.php?lang=ko&modules=ext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cmediawiki.widgets.styles%7Coojs-ui-core.icons%2Cstyles%7Coojs-ui.styles.icons-interactions%2Cindicators%7Cskins.femiwiki%7Cskins.femiwiki.xeicon%7Cwikibase.client.data-bridge.externalModifiers%7Cwikibase.client.init&only=styles&skin=femiwiki'
*   Trying 54.249.101.219:443...
* Connected to femiwiki.com (54.249.101.219) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*  CAfile: /etc/ssl/certs/ca-certificates.crt
*  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_128_GCM_SHA256
* ALPN, server accepted to use h2
* Server certificate:
*  subject: CN=femiwiki.com
*  start date: May 11 08:37:14 2021 GMT
*  expire date: Aug  9 08:37:14 2021 GMT
*  subjectAltName: host "femiwiki.com" matched cert's "femiwiki.com"
*  issuer: C=US; O=Let's Encrypt; CN=R3
*  SSL certificate verify ok.
* Using HTTP2, server supports multi-use
* Connection state changed (HTTP/2 confirmed)
* Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
* Using Stream ID: 1 (easy handle 0x55852be38580)
> GET /load.php?lang=ko&modules=ext.uls.interlanguage%7Cext.visualEditor.desktopArticleTarget.noscript%7Cmediawiki.widgets.styles%7Coojs-ui-core.icons%2Cstyles%7Coojs-ui.styles.icons-interactions%2Cindicators%7Cskins.femiwiki%7Cskins.femiwiki.xeicon%7Cwikibase.client.data-bridge.externalModifiers%7Cwikibase.client.init&only=styles&skin=femiwiki HTTP/2
> Host: femiwiki.com
> user-agent: curl/7.74.0
> accept: */*
> 
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* Connection state changed (MAX_CONCURRENT_STREAMS == 250)!
< HTTP/2 200 
< access-control-allow-origin: *
< cache-control: public, max-age=180, s-maxage=180
< content-encoding: gzip
< content-type: text/css; charset=utf-8
< date: Sun, 30 May 2021 12:07:31 UTC
< etag: W/"1p7us"
< expires: Sun, 30 May 2021 12:10:31 GMT
< server: Caddy
< strict-transport-security: max-age=31536000; includeSubDomains; preload
< vary: Accept-Encoding
< x-content-type-options: nosniff
< x-content-type-options: nosniff
< x-frame-options: DENY
< x-powered-by: PHP/7.4.16
< x-request-id: cd50e38d6fa20da491180ec2
< x-xss-protection: 1; mode=block
< 
Warning: Binary output can mess up your terminal. Use "--output -" to tell 
Warning: curl to output it to your terminal anyway, or consider "--output 
Warning: <FILE>" to save to a file.
* Failure writing output to destination
* stopped the pause stream!
* Connection #0 to host femiwiki.com left intact

• patch 1 → Do not store octet response (4bff942)
• patch 2 → Do not serve octet cache → 2ed6dc6

Originally reported at femiwiki/femiwiki#265

Use TTL feature of backends to implement maxage

Provide memory limit for 'map' backend

Choose a license

Add ability to configure BadgerDB

Now using default options[1] with in-memory mode.

1: https://github.com/dgraph-io/badger/blob/v3.2011.1/options.go#L113

Handle If-None-Match header

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/If-None-Match

Code coverage goal: 70%

Change default backend to stable one

Ristretto is the current default backend, but it is not a stable version.