[feat] a handful of small-as-dust changes

_includes/header.html

@@ -2,12 +2,16 @@
     <nav id="site-menu">
         <ul>
             <li {% if include.content == "" %}aria-current="page"{% endif %}><a href="/"><img src="/assets/icons/favicon.svg" alt=""/>secureblue</a></li>
-            {% for i in site.pages %}
-                {% if i.permalink != "/" %}
-                    {% assign slashless_permalink = i.permalink | remove: "/" %}
-                    <li {% if include.content == slashless_permalink %}aria-current="page"{% endif %}><a href="{{ i.permalink }}">{{ i.short_title }}</a></li>
-                {% endif %}
-            {% endfor %}
+            <li {% if include.content == "install" %}aria-current="page"{% endif %}><a href="/install">Install</a></li>
+            <li {% if include.content == "post-install" %}aria-current="page"{% endif %}><a href="/post-install">Post-install</a></li>
+            <li {% if include.content == "contributing" %}aria-current="page"{% endif %}><a href="/contributing">Contributing</a></li>
+            <li {% if include.content == "faq" %}aria-current="page"{% endif %}><a href="/faq">FAQ</a></li>
+            <li {% if include.content == "images" %}aria-current="page"{% endif %}><a href="/images">Images</a></li>
+            <li {% if include.content == "userns" %}aria-current="page"{% endif %}><a href="/userns">userns</a></li>
+            <li {% if include.content == "kargs" %}aria-current="page"{% endif %}><a href="/kargs">kargs</a></li>
+            <li {% if include.content == "donate" %}aria-current="page"{% endif %}><a href="/donate">Donate</a></li>
+            <li {% if include.content == "code-of-conduct" %}aria-current="page"{% endif %}><a href="/code-of-conduct">Code of Conduct</a></li>
+            <li {% if include.content == "security" %}aria-current="page"{% endif %}><a href="/security">Security</a></li>
         </ul>
     </nav>
 </header>

_includes/hero.html

@@ -8,7 +8,7 @@ <h1><a href="#secureblue">secureblue</a></h1>
 
     <figure class="device-img">
         <img class="laptop-img" width="288" height="171" src="/assets/some-random-laptop.svg" alt=""/>
-        <img class="laptop-logo-img" width="120" height="120" src="/assets/icons/favicon.svg" alt=""/>
+        <img class="laptop-logo-img" width="108" height="108" src="/assets/icons/favicon.svg" alt=""/>
     </figure>
 
 </div>

_includes/meta.html

@@ -11,7 +11,7 @@
 <meta property="og:title" content="{{ page.title }}"/>
 <meta property="og:description" content="{{ page.description }}"/>
 <meta property="og:type" content="website"/>
-<meta property="og:image" content="https://esselownitro.github.io/assets/opengraph_attempt.png"/>
+<meta property="og:image" content="https://esselownitro.github.io/assets/icons/opengraph.png"/>
 <meta property="og:image:width" content="512"/>
 <meta property="og:image:height" content="512"/>
 <meta property="og:image:alt" content="secureblue logo"/>

ads.txt

@@ -0,0 +1 @@
+placeholder.example.com, placeholder, DIRECT, placeholder

app-ads.txt

@@ -0,0 +1 @@
+placeholder.example.com, placeholder, DIRECT, placeholder

assets/main.css

@@ -297,7 +297,7 @@ main.normalize {
 
 .laptop-logo-img {
     position: absolute;
-    top: 43%;
+    top: 44%;
     left: 50%;
     transform: translate(-50%, -50%);
 }

assets/manifest.webmanifest

@@ -1,6 +1,7 @@
 {
   "name": "secureblue",
   "short_name": "secureblue",
+  "start_url": "/",
   "icons": [
     {
       "src": "/assets/icons/web-app-manifest-192x192.png",

content/INDEX.md

@@ -40,7 +40,7 @@ The following is out of scope across all secureblue projects:
 - Adds per-network MAC randomization
 - Blacklisting numerous unused kernel modules to reduce attack surface <sup>[details](https://github.com/secureblue/secureblue/blob/live/files/system/etc/modprobe.d/blacklist.conf)</sup>
 - Enabling only the [flathub-verified](https://flathub.org/apps/collection/verified/1) remote by default
-- Sets numerous hardening kernel arguments (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html)) <sup>[details](/kargs)</sup>
+- Sets numerous hardening kernel arguments (Inspired by [Madaidan's Hardening Guide](https://madaidans-insecurities.github.io/guides/linux-hardening.html)) <sup>[details](/articles/kargs)</sup>
 - Require wheel user authentication via polkit for `rpm-ostree install` <sup>[why?](https://github.com/rohanssrao/silverblue-privesc)
 - Brute force protection by locking user accounts for 24 hours after 50 failed login attempts, hardened password encryption and password quality suggestions
 - Installing usbguard and providing `ujust` commands to automatically configure it
@@ -53,7 +53,7 @@ The following is out of scope across all secureblue projects:
 - Set all default container policies to `reject`, `signedBy`, or `sigstoreSigned`
 - Disable a variety of services by default (including cups, geoclue, passim, and others)
 - Removal of the unmaintained and suid-root fuse2 by default
-- Disabling unprivileged user namespaces by default for the unconfined domain and the container domain <sup>[why?](/userns)</sup>
+- Disabling unprivileged user namespaces by default for the unconfined domain and the container domain <sup>[why?](/articles/userns)</sup>
 
 # Customization
 

content/POSTINSTALL-README.md

@@ -59,7 +59,7 @@ ujust enroll-secure-boot-key
 {: #kargs}
 
 [!NOTE]
-Learn about the hardening applied by the kargs set by the command below [here](/kargs).
+Learn about the hardening applied by the kargs set by the command below [here](/articles/kargs).
 
 ```
 ujust set-kargs-hardening

content/KARGS.md → content/articles/KARGS.md

@@ -1,8 +1,8 @@
 ---
 title: "kargs | secureblue"
 short_title: "kargs"
-description: "An overview of the hardening boot kargs used in secureblue"
-permalink: /kargs
+description: "An overview of the hardened boot kargs used in secureblue"
+permalink: /articles/kargs
 ---
 
 Table of contents

content/USERNS.md → content/articles/USERNS.md

@@ -1,8 +1,8 @@
 ---
-title: "userns advice | secureblue"
+title: "userns | secureblue"
 short_title: "userns"
-description: "A small document about unprivileged user namespaces"
-permalink: /userns
+description: "Brief explanation of unprivileged user namespaces and how the feature is handled in secureblue"
+permalink: /articles/userns
 ---
 
 # User namespaces