HTTPS caching proxy with allowlisted upstreams, stale serving during outages, and LRU-bounded disk sized for registry artifacts.
  • Shell 49.2%
  • Jinja 27.3%
  • Dockerfile 21.2%
  • Makefile 2.3%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Damián Búho 50170413e0
All checks were successful
published / release-tag (push) Successful in 2s
published / runner-is-ready (push) Successful in 35s
published / signing-is-ready (push) Successful in 5s
published / projectfile-is-valid (push) Successful in 4s
published / source-is-compliant (push) Successful in 7s
published / source-is-secure (push) Successful in 20s
published / source-passes-lint (push) Successful in 41s
published / documentation-passes-lint (push) Successful in 59s
published / projectfile-is-ok (push) Successful in 5s
published / image-is-built (amd64) (push) Successful in 2m12s
published / image-has-sbom (amd64) (push) Has been skipped
published / image-is-seeded (amd64) (push) Has been skipped
published / container-is-verified (amd64) (push) Successful in 1m43s
published / image-is-secure (amd64) (push) Successful in 2m33s
published / image-is-published (dockerhub) (push) Successful in 4s
published / image-is-published (kiota) (push) Successful in 5s
published / release-is-published (push) Has been skipped
published / release-notes-are-published (push) Has been skipped
published / published (push) Successful in 0s
chore(makefile): sync m6e submodules
core: 13.3.0
#m6e #auto
2026-10-26 16:14:55 -03:00
.compose docs(readme): declare the http-cache service and a runnable example compose 2026-09-30 05:08:54 -03:00
.container fix: assert on a here-string, not a grep -q pipeline 2026-10-07 15:49:35 -03:00
.forgejo/workflows build(workflows): enable zstd in artifacts 2026-10-26 14:24:45 -03:00
.github/workflows build(workflows): enable zstd in artifacts 2026-10-26 14:24:45 -03:00
.makefile chore(makefile): sync m6e submodules 2026-10-26 16:14:55 -03:00
.projectfile chore(security): update vulnerabilities acknowledgments 2026-08-19 22:24:40 -03:00
docs chore(docs): regen features 2026-10-26 04:15:10 -03:00
LICENSES chore: init 2026-08-06 20:06:43 -03:00
.claudeignore chore: sorting for claudeignore 2026-09-13 12:49:47 -03:00
.containerignore build: ignore .worktrees (oci/docker) 2026-09-29 23:59:51 -03:00
.dockerignore build: ignore .worktrees (oci/docker) 2026-09-29 23:59:51 -03:00
.gitattributes chore: clean j2 from attributes 2026-09-14 00:37:06 -03:00
.gitignore build: ignore .worktrees 2026-09-29 23:56:52 -03:00
.gitmodules build: hard .gitmodules before big refactoring of m6e 2026-09-02 18:40:28 -03:00
.grype.yaml build: update vulnerabilities suppression 2026-08-19 20:45:41 -03:00
.trivyignore style: fix spdx comment block (audit configs) 2026-08-11 20:25:12 -03:00
.yamllint chore(ignore): cleanup ignores 2026-09-18 00:39:10 -03:00
AGENTS.md fix(nginx): pass gixy gate on rendered config 2026-10-03 18:17:31 -03:00
AI_POLICY.md chore(docs): prevent user data from triggering textlint 2026-08-19 23:24:12 -03:00
CITATION.cff chore(version): 0.10.2 2026-10-24 04:43:31 -03:00
CLAUDE.md chore: init 2026-08-06 20:06:43 -03:00
CODE_OF_CONDUCT.md docs: cleanup code of conduct 2026-08-18 02:18:13 -03:00
CODEOWNERS chore: init 2026-08-06 20:06:43 -03:00
CONTRIBUTING.md chore: regenerate contributing 2026-09-30 06:40:35 -03:00
Dockerfile build(docker): own the download cache as the build user 2026-10-10 04:23:28 -03:00
lefthook.yaml chore: regenerate lefthook.yaml 2026-09-29 22:29:17 -03:00
LICENSE chore: init 2026-08-06 20:06:43 -03:00
Makefile fix(container): name the o9s/nginx base via the _BASE_IMAGE convention 2026-08-23 03:10:28 -03:00
osv-scanner.toml build: update vulnerabilities suppression 2026-08-19 20:45:41 -03:00
projectfile.yaml chore(version): 0.10.2 2026-10-24 04:43:31 -03:00
README.md docs: sync generated docs with the m6e milestone names 2026-10-20 06:02:23 -03:00
SECURITY.md docs: clean up security.md (temporarily disable how to link) 2026-08-18 01:37:51 -03:00
SUPPORT.md feat(forge): declare and publish to GitHub 2026-09-22 23:57:51 -03:00

Español · Українська

R8E / HTTP Cache

HTTPS caching proxy with allowlisted upstreams, stale serving during outages, and LRU-bounded disk sized for registry artifacts.

Stand with Ukraine Projectfile inside License Cosign ClamAV scanned PRs welcome REUSE compliance

Project status Last commit on GitHub Last commit on kiota.ch

Publish pipeline on GitHub Vulnerability audit on GitHub Dependency freshness on GitHub Analysis sweep on GitHub

Publish pipeline on kiota.ch Vulnerability audit on kiota.ch Dependency freshness on kiota.ch Analysis sweep on kiota.ch

Features

  • Built for large CI artifacts
  • Generic HTTP caching proxy
  • Serves through upstream outages
  • Safe shared caching

It also inherits the features of B19 / Ubuntu — see Features for the full list.

Quick Start

Save this as compose.yaml:

---
services:
  http-cache:
    image: docker.io/damianbuho/r8e-http-cache:latest
    ports:
      - "8080:8080"
    volumes:
      - http-cache:/app/cache
    cap_drop: [ALL]
    security_opt: [no-new-privileges:true]
    restart: unless-stopped
volumes:
  http-cache:

Then start it with docker compose up --detach.

What this provides

  • Service http-cache — listens on 8080 (http) — Caching HTTP proxy
  • Container image ghcr.io/damian-buho/r8e/http-cache:latest
  • Container image damianbuho/r8e-http-cache:latest

Installation

Pull the published container image:

Pull from GHCR — linux/amd64, linux/arm64

docker pull ghcr.io/damian-buho/r8e/http-cache:latest

Pull from DockerHub — linux/amd64

docker pull damianbuho/r8e-http-cache:latest

Stable releases also publish X.Y.Z, X.Y and X tags — pull the precision you want to pin.

If the registries above are unreachable, pull from the origin instead:

Pull from Kiota — linux/amd64

docker pull kiota.ch/r8e/http-cache:latest

Usage

Run the service in the background, publishing its ports:

From GHCR

docker run --detach --publish 8080:8080/tcp ghcr.io/damian-buho/r8e/http-cache:latest

From DockerHub

docker run --detach --publish 8080:8080/tcp damianbuho/r8e-http-cache:latest

Building

Clone the repository with its submodules:

git clone --recurse-submodules https://github.com/damian-buho/r8e-http-cache http-cache && cd http-cache

Build the container image locally:

make container-build

Run make with no arguments for the default target; run make help to list every target.

For the local dev loop, make dev-container brings up the dev-container.

Pipeline entry points:

  • make analyzed — Run the heavy analysis sweep (mutation testing, benchmarks)
  • make audited — Re-scan the pinned dependencies and published artifacts for new vulnerabilities
  • make check-outdated — Report every pinned dependency that lags upstream
  • make release-is-ready — Run the pseudo-CI pipeline locally — build, test and scan, without publishing

Policies

License

This project is licensed under MIT — see the LICENSE file for details.