Rūdolfs Ošiņš
73de4c0cc1
The worker isn't part of the npm workspace, so the root allowScripts doesn't cover it, and npm 12 refuses to install its dependencies under strict-allow-scripts. The wrangler dry-run bundle doesn't need any of these scripts.
Open Graph
Worker on open-graph.radicle.network that serves OG meta tags and preview card
images for social media embeds.
How it works
radicle.network is a plain static SPA. A Cloudflare Redirect Rule 302s social
media crawlers to open-graph.radicle.network, which returns HTML with OG tags.
The og:image points to /cards/... on the same domain, where the worker
renders PNG cards via Satori + resvg-wasm.
Browsers and search crawlers hit the SPA directly — no worker cost.
Routes
/*— OG HTML with meta tags (cached 2 hours)/cards/*— PNG card images (cached 2 hours)
Card routes mirror app routes: /cards/nodes/:host/:rid,
/cards/nodes/:host/:rid/issues/:id, etc. When API fetches fail, cards degrade:
specific item -> repo -> node -> home.
Cloudflare Redirect Rule
Rules > Redirect Rules on the radicle.dev zone:
(http.host eq "radicle.network") and (
(http.user_agent contains "Twitterbot") or
(http.user_agent contains "facebookexternalhit") or
(http.user_agent contains "Facebot") or
(http.user_agent contains "LinkedInBot") or
(http.user_agent contains "Slackbot") or
(http.user_agent contains "Discordbot") or
(http.user_agent contains "TelegramBot") or
(http.user_agent contains "WhatsApp") or
(http.user_agent contains "Pinterestbot") or
(http.user_agent contains "ZulipURLPreview") or
(http.user_agent contains "Bluesky Cardyb") or
(http.user_agent contains "Mastodon")
)
Dynamic 302 to
concat("https://open-graph.radicle.network", http.request.uri.path)
Rate Limiting
Security > WAF > Rate limiting rules on the radicle.network zone:
Verified bots are rate limited to 50 requests per 10 seconds across all of
radicle.network, with a 1 minute block.
Deploy
npm run deploy:open-graph # worker
npm run start:open-graph # local dev