Colophon

How this site is built, hosted, and identified.

A small, opinionated stack. Mostly built from open-source pieces I trust and have read.

Generator

Zola — single static binary, Rust. Compiles every post to plain HTML so the server's only job is to serve files.
Markdown source, syntax highlighting via the "boron" theme.
Client-side search powered by an elasticlunr index built at compile time.

OpenBSD on a small VPS.
httpd(8) serves the static files.
relayd(8) terminates TLS in front of it and injects security-relevant response headers.
TLS via Let's Encrypt, full chain.
Deploys are an rsync from my laptop after make publish.

All outbound communication can be verified by the PGP key with fingerprint E49D 556A D099 3482 CA78 B6E8 C181 88F9 E2A4 C0AD. Subkeys live on a YubiKey 5; the primary requires a physical touch to sign anything.
Discover the key via WKD: gpg --locate-external-keys mail@hugodaniel.com.
Both UIDs (mail@, hello@) are verified on keys.openpgp.org.
The Atom feed at /atom.xml ships with a detached signature at /atom.xml.asc. Anyone can verify it was built by this key.
See /pgp/ for the long version.

Onion mirror (Tor v3): gbbodsjshg2lrktc3vpcobn5i3qcuhtab5nkzjxaiip3yj5s3rlws7ad.onion
If you visit the clearnet site in Tor Browser, the Onion-Location header should redirect you automatically.
Gemini capsule: gemini://hugodaniel.com/ — a hand-curated slice, latest five posts converted to gemtext. Try Lagrange or amfora.

Content is published under EUPL 1.2.