From 492d8bb187709a507fda1f7886ecbbab18669f91 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Cl=C3=A9ment=20Martin?= <twisla@twis.la>
Date: Tue, 6 Oct 2026 20:12:54 +0200
Subject: [PATCH] Site: security.txt, robots.txt, and favicon fallbacks (ICO,
 touch icon)

security.txt (RFC 9116) under .well-known with the mailbox as contact and an
expiry in September 2027. robots.txt allows everything and points to the
sitemap. The pixel 9 gets a favicon.ico (32 and 48 px) and an
apple-touch-icon.png, drawn by tools/make_favicons.py from the same
rectangles as favicon.svg.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EhqxQ49eCju4CzKYNjZzwT
---
 site/static/.well-known/security.txt |   6 +++
 site/static/apple-touch-icon.png     | Bin 0 -> 555 bytes
 site/static/favicon.ico              | Bin 0 -> 302 bytes
 site/static/robots.txt               |   4 ++
 site/templates/base.html             |   2 +
 site/tools/make_favicons.py          |  61 +++++++++++++++++++++++++++
 6 files changed, 73 insertions(+)
 create mode 100644 site/static/.well-known/security.txt
 create mode 100644 site/static/apple-touch-icon.png
 create mode 100644 site/static/favicon.ico
 create mode 100644 site/static/robots.txt
 create mode 100644 site/tools/make_favicons.py

diff --git a/site/static/.well-known/security.txt b/site/static/.well-known/security.txt
new file mode 100644
index 0000000..53eaac3
--- /dev/null
+++ b/site/static/.well-known/security.txt
@@ -0,0 +1,6 @@
+# Security contact for roro9stack.net and the roro9stack firmware (RFC 9116).
+# Please report vulnerabilities privately by email, not in the public issue tracker.
+Contact: mailto:contact@roro9stack.net
+Expires: 2027-09-30T00:00:00.000Z
+Preferred-Languages: en, fr
+Canonical: https://roro9stack.net/.well-known/security.txt
diff --git a/site/static/apple-touch-icon.png b/site/static/apple-touch-icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..88e53b61a073434972f6d861476f4d82ee0c9a0f
GIT binary patch
literal 555
zcmeAS@N?(olHy`uVBq!ia0vp^TR@nD2}o{QKQWbof$@{4i(^Q|t+#g%@-irJFc?lN
zscOH-`A1UV@)Na&I!-~uCC+XOY-EaS<zxyDFtU?R6f(Boocf}jna|=u!vGRN1$!*5
z<qv|~a4_*Hb}uPfuweISlQU35`vU=7p@370gYO{Lu*0bVt2J*6DrTtSbsH9E13lC3
jdl+Q<jtXI!Cg;1i41T5aSg!E`B?ksiS3j3^P6<r_^$n@{

literal 0
HcmV?d00001

diff --git a/site/static/favicon.ico b/site/static/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..907abd91bfd6cdd82cb49e98d4b63302556753d4
GIT binary patch
literal 302
zcmZQzU}RuoP*7k1(h3aK3=9lvKx|+D;r9aB3xT*Zz|WnRONtA~<n{D$2?EjzAk4u8
zB>zafT@0k0JY5_^DsCkwBycP>lw#n{`>)>Prn_Jt>yj)r$G<CB7mM*oa(kT3SS)to
z8q+NIPhgQC?iDc?`=bnQNbe7EWng)5Q~rD2+d!ac44$rjF6*2Uny^?6bR2^L*y<Yz
zc^8135Qx=pZ|>w}P~c(NpmXvI53}%v56U`A?RK6P7ks&iNs8g=rC<jK2i*&6UR;z>
v0D%RU&x&$zWPDx3!2$v$=Q(yi{=vlZMfk+}$GicoyUR0Xv)o#^6xlHV$v9Xt

literal 0
HcmV?d00001

diff --git a/site/static/robots.txt b/site/static/robots.txt
new file mode 100644
index 0000000..601c542
--- /dev/null
+++ b/site/static/robots.txt
@@ -0,0 +1,4 @@
+User-agent: *
+Allow: /
+
+Sitemap: https://roro9stack.net/sitemap.xml
diff --git a/site/templates/base.html b/site/templates/base.html
index 2114593..abda627 100644
--- a/site/templates/base.html
+++ b/site/templates/base.html
@@ -10,6 +10,8 @@
 <meta name="copyright" content="© 2026 Clément Martin">
 {% if current_url %}<link rel="canonical" href="{{ current_url }}">{% endif %}
 <link rel="icon" href="/img/favicon.svg" type="image/svg+xml">
+<link rel="icon" href="/favicon.ico" sizes="32x32 48x48">
+<link rel="apple-touch-icon" href="/apple-touch-icon.png">
 <link rel="preload" href="/fonts/DMMono-Medium.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="preload" href="/fonts/HankenGrotesk.woff2" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="/css/site.css">
diff --git a/site/tools/make_favicons.py b/site/tools/make_favicons.py
new file mode 100644
index 0000000..3a2c99d
--- /dev/null
+++ b/site/tools/make_favicons.py
@@ -0,0 +1,61 @@
+#!/usr/bin/env python3
+"""Draw the pixel "9" of static/img/favicon.svg as PNGs and an ICO, with the standard library.
+
+    python3 site/tools/make_favicons.py
+
+Writes static/favicon.ico (32 and 48 px, PNG inside) and static/apple-touch-icon.png (180 px).
+The 9 is a 7x7 grid, scaled by a whole number and centred on the background colour."""
+import struct
+import zlib
+from pathlib import Path
+
+BG = (0x00, 0x00, 0x55)
+FG = (0x00, 0xDB, 0xFF)
+# x, y, w, h: the same rectangles as favicon.svg
+RECTS = [(1, 0, 3, 1), (0, 1, 1, 2), (4, 1, 1, 5), (1, 3, 3, 1), (0, 6, 3, 1)]
+GRID = 7
+
+STATIC = Path(__file__).resolve().parent.parent / "static"
+
+
+def cells():
+    on = set()
+    for x, y, w, h in RECTS:
+        on.update((x + i, y + j) for i in range(w) for j in range(h))
+    return on
+
+
+def png(size):
+    scale = size // GRID
+    pad = (size - scale * GRID) // 2
+    on = cells()
+    rows = bytearray()
+    for py in range(size):
+        rows.append(0)
+        for px in range(size):
+            cx, cy = (px - pad) // scale, (py - pad) // scale
+            inside = 0 <= px - pad < scale * GRID and 0 <= py - pad < scale * GRID
+            rows.extend(FG if inside and (cx, cy) in on else BG)
+
+    def chunk(kind, data):
+        body = kind + data
+        return struct.pack(">I", len(data)) + body + struct.pack(">I", zlib.crc32(body))
+
+    return (b"\x89PNG\r\n\x1a\n" + chunk(b"IHDR", struct.pack(">IIBBBBB", size, size, 8, 2, 0, 0, 0)) +
+            chunk(b"IDAT", zlib.compress(bytes(rows), 9)) + chunk(b"IEND", b""))
+
+
+def ico(sizes):
+    images = [png(s) for s in sizes]
+    out = struct.pack("<HHH", 0, 1, len(images))
+    offset = 6 + 16 * len(images)
+    for s, data in zip(sizes, images):
+        out += struct.pack("<BBBBHHII", s, s, 0, 0, 1, 32, len(data), offset)
+        offset += len(data)
+    return out + b"".join(images)
+
+
+if __name__ == "__main__":
+    (STATIC / "favicon.ico").write_bytes(ico([32, 48]))
+    (STATIC / "apple-touch-icon.png").write_bytes(png(180))
+    print("wrote favicon.ico, apple-touch-icon.png")