windlecdn

cdn.windle.fun

Assets at the edge,
images on demand.

Hashed bundles, fonts and the brand kit are served with long-lived caching and open CORS. Images are resized, cropped and re-encoded on the fly, then cached on disk so each variant is computed once.

What lives here

/assets/ · /fonts/

Versioned files

Content-hashed names only. Cached for a year and marked immutable: a new version is a new URL.

Cache-Control: public, max-age=31536000, immutable

/brand/

Brand kit

Logo marks and icons under stable names. Cached for a day, revalidated in the background for a week.

Cache-Control: public, max-age=86400, stale-while-revalidate=604800

/img/

Image transforms

Signed URLs only. Resize, crop, quality and format per request. AVIF or WebP is chosen from the browser's Accept header.

X-Cache-Status: MISS → HIT

Every response carries Access-Control-Allow-Origin: * and Timing-Allow-Origin: *, so fonts load cross-origin and images can be used as WebGL textures.

Image transforms

https://cdn.windle.fun/img/{signature}/{options}/plain/{path}[@format]
signature
HMAC-SHA256 of the rest of the path, base64url. Unsigned or tampered URLs are rejected with 403. URLs are minted by the api or /opt/windle/bin/imgproxy-url.sh.
options
imgproxy processing options, e.g. rs:fill:1200:600, q:70, g:sm.
path
A file in this CDN's release, e.g. samples/aurora.jpg. Remote URLs are not accepted.
@format
Omit it for automatic AVIF / WebP / original by Accept (browser and origin cache only). Pin it (@webp) when the URL should also be cached by Cloudflare.
Blue aurora over a dark horizon, rendered on the fly at 1200×600 in the best format this browser accepts.
rs:fill:1200:600 · format negotiated for this browser · source 2400×1600 JPEG
Aurora sample pinned to AVIF
@avif
Aurora sample pinned to WebP
@webp
Aurora sample pinned to JPEG
@jpg
  1. Browser caches every variant for a year (Vary: Accept).
  2. Cloudflare caches pinned-format URLs only; automatic ones carry Cloudflare-CDN-Cache-Control: no-store.
  3. Origin cache: nginx keeps each variant on disk (2 GB, 30 days idle), keyed by format bucket.
  4. imgproxy renders a miss: 2 workers, 40 MP source limit, 4096 px output limit.

Brand kit

The windle mark: a rounded square with a W cut in negative space. Keep clear space of a quarter of its width; do not recolour beyond blue, white and black.

Electric blue
#1C69E3 · oklch(0.55 0.2 260)
Glow
#6CD3FA · oklch(0.82 0.11 225)
Ink
#000000 · oklch(0 0 0)