CMS
Drupal audit: cache bins, Twig, and headers at the vhost
· Configuration notes, not a newsroom.
SiteRune fingerprints Drupal from generator tags, Drupal.settings, and /sites/default/files. The brief is reverse-proxy cache and modules — not a Drupal.org essay.
Internal page cache is not a CDN
Drupal can cache HTML in bins and still send no-store at the edge, or skip cache on anonymous traffic because a module personalized the page. SiteRune scores the document Cache-Control and TTFB from this vantage point. Internal cache that never reaches a shared CDN still looks like a cold PHP bootstrap.
Modules are the tax
Aggregator, unused views, and a dozen JS libraries on every page are cms-health in spirit even when we do not name the module. Headers belong in nginx or the host, not a theme preprocess that dies on cache. Publish llms.txt at the docroot. Do not Disallow GPTBot because a security module shipped a preset.
Run it on a live URL
The brief will name your CMS and attach the files. Three guest scans, no card.