Age	Commit message (Collapse)	Author	Lines
39 hours	Cut the Apache config down to a generic drop-in	Bryce Kwon	-270/+54
	The old file was a complete httpd.conf that named RHEL's paths and user and loaded its own modules, so on Debian it had to be rewritten before Apache would start. As a virtual host it leaves all of that to the distribution, and it takes the nginx config's header and commented examples. For HTTPS the one virtual host moves to port 443 rather than a second host repeating its routing, and a small host on port 80 sends plain HTTP on to it.
8 days	Say cgit pages carry no expiry, not no headers	Bryce Kwon	-2/+2
	Behind an auth filter every page carries Cache-Control: private and the login page no-store, so only the missing expiry holds on every site.
8 days	Spell url the way the tree mostly does	Bryce Kwon	-3/+3
	Names keep their own spelling, so the URL trailer and CGIT_REPO_URL stay in capitals.
10 days	Drop config comments that restate their line	Bryce Kwon	-1/+0
10 days	Say each routing fact once in the server configs	Bryce Kwon	-14/+11
10 days	Trim the header notes in the server configs	Bryce Kwon	-7/+2
	Each config listed every header cgit sends, where only its own nosniff and strict policy on raw bytes bear on the headers set there. The list also missed Vary, and the Apache one called Apache a proxy.
10 days	Name every default asset link in the configs	Bryce Kwon	-4/+4
	The nginx sub-path recipe moved only the stylesheet and the logo, and left the script and the icon pointing at the domain root.
11 days	Pin the server configs to the releases they suit	Bryce Kwon	-1/+3
	Each release named is the one its project's own site listed as current on 2026-10-29.
2026-09-25	Mark a page behind an auth filter private	Bryce Kwon	-5/+5
	Only the login page carried a Cache-Control, so a page an auth filter had let a visitor see could be kept by a cache shared with the next visitor. The page also varies on the cookie that got them in.
2026-09-15	Unify the docs, samples and extensions	Bryce Kwon	-5/+4
2026-09-07	Refresh the server configs and drop unsafe-inline	Bryce Kwon	-34/+26
	style-src allowed inline styles only for the diffstat bars, which take their width from colspan instead. t0004 now checks that the three configs pin the same policy.
2026-08-18	Rework the response headers in the server configs	Bryce Kwon	-11/+49
2026-08-17	Drop the Last-Modified, Expires and ETag headers	Bryce Kwon	-1/+5
2026-08-01	Make the server configs complete standalone files	Bryce Kwon	-55/+157
2026-07-31	Reorganise the tree into vendor/ and custom/	Bryce Kwon	-0/+0