Age	Commit message (Collapse)	Author	Lines
20 hours	Say each routing fact once in the server configs	Bryce Kwon	-14/+11
20 hours	Trim the header notes in the server configs	Bryce Kwon	-7/+2
	Each config listed every header cgit sends, where only its own nosniff and strict policy on raw bytes bear on the headers set there. The list also missed Vary, and the Apache one called Apache a proxy.
20 hours	Name every default asset link in the configs	Bryce Kwon	-4/+4
	The nginx sub-path recipe moved only the stylesheet and the logo, and left the script and the icon pointing at the domain root.
3 days	Pin the server configs to the releases they suit	Bryce Kwon	-1/+3
	Each names the branch it was written for and the release current at its last review, nginx 1.30.6 stable, Apache httpd 2.4.69 and lighttpd 1.4.85, as the projects' own sites listed them on 2026-10-29.
2026-10-01	Mark a page behind an auth filter private	Bryce Kwon	-5/+5
	Only the login page carried a Cache-Control, so a page an auth filter had let a visitor see could be kept by a cache shared with the next visitor. The page also varies on the cookie that got them in.
2026-09-21	Unify the docs, samples and extensions	Bryce Kwon	-5/+4
2026-09-06	Refresh the server configs and drop `unsafe-inline`	Bryce Kwon	-34/+26
	The inline handlers and the auto-submitting selects are gone, so `script-src` no longer needs it, and t0004 now checks that the three configs pin the same policy.
2026-08-18	Rework the response headers in the server configs	Bryce Kwon	-11/+49
2026-08-14	Drop the Last-Modified, Expires and ETag headers	Bryce Kwon	-1/+5
2026-08-01	Make the server configs complete standalone files	Bryce Kwon	-55/+157
2026-07-25	Reorganize the tree into vendor/ and custom/	Bryce Kwon	-0/+152