Proxies images against a HMAC signature -- this prevents knot URLs from directly being hit and possibly spammed. Also caches images in Cloudflare's global CDN.
···1+# camo
2+3+Camo is Tangled's "camouflage" service much like that of [GitHub's](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/about-anonymized-urls).
4+5+Camo uses a shared secret `CAMO_SHARED_SECRET` to verify HMAC signatures. URLs are of the form:
6+7+```
8+https://camo.tangled.sh/<signature>/<hex-encoded-origin-url>
9+```
10+11+It's pretty barebones for the moment and doesn't support a whole lot of what the
12+big G's does. Ours is a Cloudflare Worker, deployed using `wrangler` like so:
13+14+```
15+npx wrangler deploy
16+npx wrangler secrets put CAMO_SHARED_SECRET
17+```