homepage.git/assets, branch mainPersonal website (Quarto, terminal-first)http://git.jayrup.me/c/homepage.git/atom?h=main2026-10-22T22:11:10Znginx: serve public_key to curl cleanly, restore lost security headers2026-10-22T22:11:10ZVoid Agentvoid@jayrup.hermes2026-10-22T22:11:10Zurn:sha1:70dffce202a8cc1d15473bbc2750bdf29a54b0fb
`curl https://jayrup.me/public_key` is the documented way to get this key
onto a VPS, so both the file and the config serving it need to be exact.
Key file: drop the trailing space, one trailing newline. A key with no
trailing newline makes `curl ... >> ~/.ssh/authorized_keys` glue itself onto
the previous line and silently break every later key in the file.
nginx:
- `/assets/public_key` ignored $final_suffix, so curl got 404 while browsers
got 200. Route both through the suffix-aware try_files.
- add_header does not merge across levels: the asset, PDF and .txt locations
each declared one, so they inherited none of the security headers. The
asset location now repeats them; the PDF and .txt locations no longer
declare any (default_type / mime.types + charset do the job), so they
inherit again.
- `add_header Content-Type application/pdf` appended a second Content-Type
instead of setting it. Use default_type.
- `expires 30d` plus an explicit Cache-Control emitted two Cache-Control
headers. Use one explicit header.
- add `charset utf-8` so text/plain (what curl gets) is not served
charset-less while the content contains non-ASCII.
deploy: ship nginx.conf alongside public/. It is bind-mounted into the
container, so it never travelled with the rsync'd tree — the live config was
from May and predated the hardening committed in 0ee667a. Test with
`nginx -t` before reloading and restore the previous config on failure.
links: drop GitHub, point everything at git.jayrup.me (homepage contact, CV header + dissertation entry, PDF link annotations)2026-09-20T14:19:18ZVoid Agentvoid@jayrup.hermes2026-09-20T14:19:18Zurn:sha1:f8fca9518e2d92cba2dbcd3ab71ebc00f2e22dc6fix: title frontmatter, terminal resume, project list sync, nginx hardening, and styles2026-09-02T10:00:42ZCaptainJack2491jayrupnakawala@gmail.com2026-09-02T10:00:42Zurn:sha1:0ee667ac6cb2493e4f9ddaa5b69f595071aca936move external dependencies into assets/ so repo is self-contained2026-07-07T14:36:19ZCaptainJack2491jayrupnakawala@gmail.com2026-07-07T14:36:19Zurn:sha1:80f87fb161490c4fb915c14b20ed074699a166e8