Switch to Netlify

Signed-off-by: Tommy <[email protected]>

.gitignore

@@ -1,69 +1,7 @@
-# Logs
-logs
-*.log
-npm-debug.log*
-yarn-debug.log*
-yarn-error.log*
-firebase-debug.log*
-firebase-debug.*.log*
-
-# Firebase cache
-.firebase/
-
-# Firebase config
-
-# Uncomment this if you'd like others to create their own Firebase project.
-# For a team working on the same Firebase project(s), it is recommended to leave
-# it commented so all members can deploy to the same project(s) in .firebaserc.
-# .firebaserc
-
-# Runtime data
-pids
-*.pid
-*.seed
-*.pid.lock
-
-# Directory for instrumented libs generated by jscoverage/JSCover
-lib-cov
-
-# Coverage directory used by tools like istanbul
-coverage
-
-# nyc test coverage
-.nyc_output
-
-# Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files)
-.grunt
-
-# Bower dependency directory (https://bower.io/)
-bower_components
-
-# node-waf configuration
-.lock-wscript
-
-# Compiled binary addons (http://nodejs.org/api/addons.html)
-build/Release
-
-# Dependency directories
-node_modules/
-
-# Optional npm cache directory
-.npm
-
-# Optional eslint cache
-.eslintcache
-
-# Optional REPL history
-.node_repl_history
-
-# Output of 'npm pack'
-*.tgz
-
-# Yarn Integrity file
-.yarn-integrity
-
-# dotenv environment variables file
-.env
-
 # Ignore .DS_Store files (macOS)
-.DS_Store
+.DS_Store
+
+# Ignore Hugo generated files
+public/
+resources/
+.hugo_build.lock

config.yml

@@ -1,6 +1,5 @@
 baseURL: "https://privsec.dev"
 title: PrivSec.dev
-paginate: 5
 theme: PaperMod
 
 enableRobotsTXT: true
@@ -55,6 +54,8 @@ params:
       url: "https://github.com/PrivSec-dev"
     - name: matrix
       url: "https://matrix.to/#/#privsec:arcticfoxes.net"
+    - name: twitter
+      url: "https://twitter.com/privsec_dev"
     - name: email
       url: "mailto:[email protected]"
     - name: rss
@@ -136,4 +137,4 @@ privacy:
     simple: false
   youtube:
     disable: false
-    privacyEnhanced: true
+    privacyEnhanced: true

content/about.md

@@ -1,11 +1,12 @@
 ---
 title: "About Us"
+date: 2022-07-16
+lastmod: 2022-07-21
 ---
 
 PrivSec.dev is made by a group of enthusiastic individuals looking to provide practical privacy and security advice for the end user. We are security researchers, developers, system administrators... generally people with technical knowledge and work in the field.
 
-We focus on in-depth system configuration, security analysis, and software/hardware recommendations. Our site is based on technical merits, not ideologies and politics. 
-
+Just stick with Windows, Google Chrome, don't use 2FA.
 ---
 
 ### Tommy

content/code.md

@@ -1,5 +1,7 @@
 ---
 title: "Code of Conflict"
+date: 2022-07-18
+lastmod: 2022-07-21
 ---
 
 The development effort of PrivSec.dev is a very personal process compared to “traditional” ways of developing a community website. Your recommendations and ideas behind it will be carefully reviewed, often resulting in critique and criticism. Know that this happens because everyone involved wants to see the best possible solution for the overall success of PrivSec.dev. 

content/donate.md

@@ -1,5 +1,7 @@
 ---
 title: "Donate"
+date: 2022-07-16
+las
 ---
 
 The domain costs us $12/year to renew from Google. We got our repository hosted for free on GitHub. We got our site hosted for free with Firebase. It costs Tommy ~$20/month to run the mail server, but that server is used for a bunch of his projects, not just PrivSec, and we doubt it will be used that much anyways. The point is, this website does not cost much to run, and as such we will not be accepting donation as a project.

content/privacy.md

@@ -1,5 +1,7 @@
 ---
 title: "Privacy Policy"
+date: 2022-07-18
+lastmod: 2022-07-21
 ---
 
 PrivSec.dev as a project does not collect any personal information. We do not log your IPs, collect your fingerprints, or run any sort of analytics on you. In sort, we do not care who you are, what you do, or how you are using our website. It is none of our business.
@@ -12,9 +14,9 @@ Services like Disqus, Instagram, and Google Analytics are disabled. We do link t
 
 ## Hosting Provider
 
-We use Google Domains, Google DNS, and Google Firebase Hosting to run our website. We turn Google Analytics off for our project, so it should not collect any data on you.
+We use Google Domains, Google DNS. We host our website on Netlify. We turn Netlify Analytics off for our project, so we do not have any information about you. We do not use Netlify assets optimization, so nothing is hosted on CloudFront.
 
-For the Privacy Policy of Firebase Hosting, please check out [this link](https://firebase.google.com/support/privacy).
+Netlify does store your IP address and access logs for less than 30 days. Please check out [this link](https://www.netlify.com/gdpr-ccpa/) for their policy regarding this. Their general privacy policy can be found [here](https://www.netlify.com/gdpr-ccpa/).
 
 ## Git Repository
 
@@ -32,4 +34,5 @@ Direct or private messages with individuals are end to end encrypted by default.
 
 ## Email
 
-Our mail server is hosted by Tommy on his own Dedicated Server colocated in the United Kingdom. Many of us use our @privsec.dev email as an alias and forward it to another email provider. The privacy of your emails with us is the same as with any other person you communicate with using this protocol - the hosting providers can read all of your conversations with us unless you are using PGP, and even when you use PGP there is no metadata protection.
+Our mail server is hosted by Tommy on his own Dedicated Server colocated in the United Kingdom. Many of us use our @privsec.dev email as an alias and forward it to another email provider. The privacy of your emails with us is the same as with any other person you communicate with using this protocol - the hosting providers can read all of your conversations with us unless you are using PGP, and even when you use PGP there is no metadata protection.
+

content/search.md

@@ -3,6 +3,6 @@ title: "Search" # in any language you want
 layout: "search" # is necessary
 # url: "/archive"
 # description: "Description for Search"
-summary: "search"
+summary: "Search"
 placeholder: "Enter your search query"
 ---

layouts/partials/post_nav_links.html

@@ -0,0 +1,19 @@
+{{- $pages := where site.RegularPages.ByTitle "Type" "in" site.Params.mainSections }}
+{{- if and (gt (len $pages) 1) (in $pages . ) }}
+<nav class="paginav">
+  {{- with $pages.Next . }}
+  <a class="prev" href="{{ .Permalink }}">
+    <span class="title">« {{ i18n "prev_page" }}</span>
+    <br>
+    <span>{{- .Name -}}</span>
+  </a>
+  {{- end }}
+  {{- with $pages.Prev . }}
+  <a class="next" href="{{ .Permalink }}">
+    <span class="title">{{ i18n "next_page" }} »</span>
+    <br>
+    <span>{{- .Name -}}</span>
+  </a>
+  {{- end }}
+</nav>
+{{- end }}

netlify.toml

@@ -0,0 +1,16 @@
+[[headers]]
+  for = "/*"
+  [headers.values]
+    Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"
+    Content-Security-Policy = "default-src 'self'; script-src 'self' 'unsafe-inline'; form-action 'none'; frame-ancestors 'none'; block-all-mixed-content; base-uri 'none'"
+    X-Content-Type-Options = "nosniff"
+    Referrer-Policy = "no-referrer"
+    Cross-Origin-Opener-Policy = "same-origin"
+    Cross-Origin-Embedder-Policy = "require-corp"
+    X-Frame-Options = "DENY"
+    X-XSS-Protection = "0"
+    Permissions-Policy = "accelerometer=(), autoplay=(), camera=(), clipboard-read=(), clipboard-write=(), display-capture=(), document-domain=(), encrypted-media=(), fullscreen=(), geolocation=(), gyroscope=(), hid=(), magnetometer=(), microphone=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=(), usb=(), xr-spatial-tracking=()"
+    Cross-Origin-Resource-Policy = "same-origin"
+
+[context.deploy-preview]
+command = "hugo -b $DEPLOY_PRIME_URL"

static/.well-known/mta-sts.txt

@@ -0,0 +1,4 @@
+version: STSv1
+mode: enforce
+mx: mail.tommytran.io
+max_age: 604800