Now that the origin serves directly (no CDN compressing for us):
- Add gzip + brotli response compression — homepage HTML 84KB -> ~25KB
(~71% smaller), big Core Web Vitals / crawl-budget win
- Baseline security headers on every response: X-Content-Type-Options,
X-Frame-Options, Referrer-Policy (no HSTS yet — cert just stabilised)
- Long-cache immutable GUID uploads (Cache-Control max-age=30d,immutable)
Verified locally: gzip+br negotiated, headers present, uploads cached.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
soroush.asadi
f3701c5893