Louis Simoneau ab050fddd7 Pin image versions, add security headers, log limits, unattended upgrades ...

- Pin Miniflux to 2.2.19, Gitea to 1.25 (from :latest)
- Add security headers (X-Content-Type-Options, X-Frame-Options,
  Referrer-Policy, Permissions-Policy) to all Caddy sites
- Add Docker JSON log rotation (10m x 3 files) to all containers
- Add SHA256 checksum verification for GoatCounter binary download
- Install and configure unattended-upgrades for security patches

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-10 08:31:41 +10:00

infra

Pin image versions, add security headers, log limits, unattended upgrades

2026-04-10 08:31:41 +10:00

site

Update site content, styling, and review layout

2026-04-10 08:14:29 +10:00

.gitignore

Initial commit: Hugo site with Caddy infra and deploy tooling

2026-04-08 19:45:03 +10:00

CLAUDE.md

Trim CLAUDE.md to non-discoverable context only

2026-04-10 08:14:15 +10:00

deploy.sh

Initial commit: Hugo site with Caddy infra and deploy tooling

2026-04-08 19:45:03 +10:00

enrich.py

Update site content, styling, and review layout

2026-04-10 08:14:29 +10:00

Makefile

Add Gitea self-hosted git server

2026-04-10 08:14:11 +10:00

Description

No description provided

361 KiB

Languages

CSS 39.2%

Python 35.1%

HTML 16.8%

Makefile 6.8%

Shell 2.1%