3 Commits

Include renames

Author	SHA1	Message	Date
ahmza	f402556380	Fix audit findings: bugs, security, perf, content ... Bugs: - setup-wsl: fix broken /img/WSL/* image paths (now bundle-relative; images were broken on the published post) + better alt text - pi-docker-swarm: remove broken missing cluster.webp reference - archetypes/posts.md: fix malformed {{ }} template so 'hugo new' works - rename arrstack/arrstack.md -> index.md so it's a proper leaf bundle - static/admin/config.yml: fix 'htpps' -> 'https' site_url typo - fix silently-dropped <placeholder> text (unsafe=false dropped them): wrap <distro>/<username>/<user>/<version>/<ip address> etc in backticks across setup-wsl, securing-ssh, pi-docker-swarm, mc-server-on-docker Security: - render-link.html: add rel=noopener noreferrer to external target=_blank - extend-footer.html: fix rel='me' trapped in class attr (broke Mastodon verification); add proper rel/target - static/admin/index.html: pin Sveltia CMS to 0.172.4 via jsDelivr + SRI Performance: - hugo.toml: ignoreFiles for *.aseprite/*.bak (stop shipping source art; non-page files 23 -> 13) - video shortcode: preload=metadata; image shortcode: loading=lazy decoding=async - sws.toml: drop SPA page-fallback so missing paths return real 404 (404.html) Content/SEO: - normalize tag casing (HomeLab/RemoteAccess/SSH/HUGO -> lowercase), fix 'prodcutivity' typo, arrstack tags:[""] -> [], add welcome description - delete stray index.md.bak	2026-07-25 03:36:50 +01:00
ahmza	498231c160	Tune SWS config for running behind a reverse proxy ... The site sits behind a reverse proxy that already handles compression and security headers. Disable those in SWS to avoid redundant work and duplicate/conflicting headers, letting each layer own one concern. - compression / compression-static: off (proxy compresses) - security-headers: off (proxy sets them) - cache-control-headers, page-fallback, health: kept (origin concerns)	2026-07-25 01:09:42 +01:00
ahmza	898e3003a2	Switch static server from nginx to static-web-server ... Replace nginx:alpine-slim with the scratch-based static-web-server image, reducing the final image size ~32MB -> ~23MB (28% smaller). - Dockerfile: serve from static-web-server:2, copy site to /public - sws.toml: mirror previous nginx behavior (compression, cache-control, SPA index fallback) plus security headers and /health endpoint - Remove now-unused nginx.conf	2026-07-25 01:04:17 +01:00