Follow-up to the Caddy security review of the live site; touches only site/, so it is also the first real run of the Site-only CI job (the firmware workflow should skip it).
.well-known/security.txt (RFC 9116): contact is the mailbox, expires 2027-09-30. Calendar reminder needed to renew.
robots.txt: allow everything, point to sitemap.xml (Zola already generates it).
Favicon: the pixel 9 was already favicon.svg; adds favicon.ico (32/48) and apple-touch-icon.png (180) from tools/make_favicons.py, linked in base.html.
Checked: Zola build writes all of them, check_site.py reports 0 problems. Not checked in a browser (tab icon) nor live.
Follow-up to the Caddy security review of the live site; touches only `site/`, so it is also the first real run of the Site-only CI job (the firmware workflow should skip it).
- `.well-known/security.txt` (RFC 9116): contact is the mailbox, expires 2027-09-30. Calendar reminder needed to renew.
- `robots.txt`: allow everything, point to `sitemap.xml` (Zola already generates it).
- Favicon: the pixel 9 was already `favicon.svg`; adds `favicon.ico` (32/48) and `apple-touch-icon.png` (180) from `tools/make_favicons.py`, linked in `base.html`.
Checked: Zola build writes all of them, `check_site.py` reports 0 problems. Not checked in a browser (tab icon) nor live.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
https://claude.ai/code/session_01EhqxQ49eCju4CzKYNjZzwT
security.txt (RFC 9116) under .well-known with the mailbox as contact and an
expiry in September 2027. robots.txt allows everything and points to the
sitemap. The pixel 9 gets a favicon.ico (32 and 48 px) and an
apple-touch-icon.png, drawn by tools/make_favicons.py from the same
rectangles as favicon.svg.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EhqxQ49eCju4CzKYNjZzwT
twisla
merged commit 5e36e69d76 into main2026-10-06 18:16:49 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Follow-up to the Caddy security review of the live site; touches only
site/, so it is also the first real run of the Site-only CI job (the firmware workflow should skip it)..well-known/security.txt(RFC 9116): contact is the mailbox, expires 2027-09-30. Calendar reminder needed to renew.robots.txt: allow everything, point tositemap.xml(Zola already generates it).favicon.svg; addsfavicon.ico(32/48) andapple-touch-icon.png(180) fromtools/make_favicons.py, linked inbase.html.Checked: Zola build writes all of them,
check_site.pyreports 0 problems. Not checked in a browser (tab icon) nor live.🤖 Generated with Claude Code
https://claude.ai/code/session_01EhqxQ49eCju4CzKYNjZzwT