j.foucher
962f5a8ce0
- gate.php : ETag now derived from size+mtime instead of md5_file($zip). Previously the gate hashed the entire 14 GB ZIP on every HEAD/GET call (including each of 8 parallel segments) → 30s-5min preparation lag for clients before the first byte. Now <1ms per request. - SignManifest : disk-backed cache for SHA-256 keyed by (path,size,mtime). Re-signing 5×14 GB versions used to take ~25 min, now ~1s when nothing changed. New "Force re-hash" toggle in admin to ignore the cache. - versions.php : per-row "🔁 Hash" button to sign a single version, plus a "⚙ Hash" dropdown to toggle hashAlgorithm:none for builds where the user accepts skipping client-side verification (manifest stays signed Ed25519, only the per-ZIP SHA-256 verification is bypassed). - DownloadUrl.php : signed-URL TTL bumped 1h → 6h to cover slow ADSL users who need >1h to finish a 14 GB download. - .gitignore : track server/builds/.htaccess + gate.php (still ignore the actual ZIP/exe binaries). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
10 lines
369 B
ApacheConf
10 lines
369 B
ApacheConf
# Tout accès direct à un .zip passe d'abord par le gardien gate.php qui vérifie
|
|
# la signature HMAC + l'expiration. Si OK, le gardien sert le fichier (avec
|
|
# support Range pour la reprise). Sinon, 403.
|
|
RewriteEngine On
|
|
RewriteBase /PS_Launcher/builds/
|
|
|
|
RewriteCond %{REQUEST_FILENAME} -f
|
|
RewriteCond %{REQUEST_URI} \.zip$
|
|
RewriteRule ^(.*)$ gate.php?file=$1 [QSA,L]
|