claudeandClaude Sonnet 4.6 eb74c4fced fix(nginx): route all build output files directly to clsi-nginx ...

Previously only output.* (output.html, output.pdf, etc.) bypassed the
web server. Companion assets (CSS, JS, images, videos, fonts) from
Quarto/RevealJS presentations went through the web server, hitting the
miscOutputDownload rate limiter (1000 req/hour per project). A heavy
presentation loads 50+ assets per page view and would exhaust the limit
quickly, returning 429 for most assets and leaving the page unstyled.

The build ID is an unguessable random token — the same security model
already used for output.html being served without auth. Routing all
output files through clsi-nginx is safe and also fixes Content-Type
for media files (video/mp4 etc.) now that the mime type fix is in place.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-14 11:02:50 +00:00

..

clsi-nginx.conf

fix(clsi-nginx): add video and audio mime types

2026-07-14 10:43:15 +00:00

nginx.conf.template

Fix Lumière theming + upload timeout via global middleware

2026-06-13 19:33:53 +00:00

overleaf.conf

fix(nginx): route all build output files directly to clsi-nginx

2026-07-14 11:02:50 +00:00