Age	Commit message (Collapse)	Author	Lines
38 hours	Cut the lighttpd config down to a generic drop-in	Bryce Kwon	-155/+61
	The old file was a complete lighttpd.conf with its own user, modules and MIME table. As a snippet it takes those from the distribution and loads only the three modules it uses, which lighttpd skips when the main config loads them already. It takes the nginx config's header and commented examples. The host block matches on every socket, so HTTPS needs only the socket, and the redirect is a condition on the scheme inside it. The stock lighttpd.conf on Debian, Alpine and Fedora refuses urls ending in ~ or .inc, so a repository's config.inc answered 403 until the host block cleared the list. git-http-backend's cgi.assign sits outside the url condition because lighttpd checks it after splitting the path, when that condition no longer matches, and inside it the program itself was served as a file.
8 days	Spell url the way the tree mostly does	Bryce Kwon	-2/+2
	Names keep their own spelling, so the URL trailer and CGIT_REPO_URL stay in capitals.
10 days	Drop config comments that restate their line	Bryce Kwon	-2/+1
10 days	Say each routing fact once in the server configs	Bryce Kwon	-3/+3
10 days	Trim the header notes in the server configs	Bryce Kwon	-7/+2
	Each config listed every header cgit sends, where only its own nosniff and strict policy on raw bytes bear on the headers set there. The list also missed Vary, and the Apache one called Apache a proxy.
11 days	Pin the server configs to the releases they suit	Bryce Kwon	-0/+2
	Each release named is the one its project's own site listed as current on 2026-10-29.
2026-09-25	Mark a page behind an auth filter private	Bryce Kwon	-5/+5
	Only the login page carried a Cache-Control, so a page an auth filter had let a visitor see could be kept by a cache shared with the next visitor. The page also varies on the cookie that got them in.
2026-09-15	Unify the docs, samples and extensions	Bryce Kwon	-5/+4
2026-09-07	Refresh the server configs and drop unsafe-inline	Bryce Kwon	-17/+15
	style-src allowed inline styles only for the diffstat bars, which take their width from colspan instead. t0004 now checks that the three configs pin the same policy.
2026-08-18	Rework the response headers in the server configs	Bryce Kwon	-8/+38
2026-08-01	Make the server configs complete standalone files	Bryce Kwon	-22/+38
2026-07-31	Reorganise the tree into vendor/ and custom/	Bryce Kwon	-0/+0