#staticsite — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #staticsite, aggregated by home.social.
-
The one header I didn't add yet: CSP.
For sites that render untrusted input it mitigates an active surface. For a static site it guards against rarer-but-bigger events: a compromised analytics script, a poisoned CDN, a future change that adds an input path.
Astro 6 added an integration for what it emits; iframes, external fonts, and third-party services stay manual. Will inshallah follow when the audit fits.
-
The one header I didn't add yet: CSP.
For sites that render untrusted input it mitigates an active surface. For a static site it guards against rarer-but-bigger events: a compromised analytics script, a poisoned CDN, a future change that adds an input path.
Astro 6 added an integration for what it emits; iframes, external fonts, and third-party services stay manual. Will inshallah follow when the audit fits.
-
The one header I didn't add yet: CSP.
For sites that render untrusted input it mitigates an active surface. For a static site it guards against rarer-but-bigger events: a compromised analytics script, a poisoned CDN, a future change that adds an input path.
Astro 6 added an integration for what it emits; iframes, external fonts, and third-party services stay manual. Will inshallah follow when the audit fits.
-
Skipped Permissions-Policy on the static site.
It disables browser APIs (camera, mic, geolocation) the site doesn't use. Disabling something you're not using doesn't protect you from anything.
Embedding YouTube with fullscreen would also mean carving exceptions back in. More config for zero gain.
The scanner score drops one notch. The site is no less safe.
-
Skipped Permissions-Policy on the static site.
It disables browser APIs (camera, mic, geolocation) the site doesn't use. Disabling something you're not using doesn't protect you from anything.
Embedding YouTube with fullscreen would also mean carving exceptions back in. More config for zero gain.
The scanner score drops one notch. The site is no less safe.
-
Skipped Permissions-Policy on the static site.
It disables browser APIs (camera, mic, geolocation) the site doesn't use. Disabling something you're not using doesn't protect you from anything.
Embedding YouTube with fullscreen would also mean carving exceptions back in. More config for zero gain.
The scanner score drops one notch. The site is no less safe.
-
A bit inside baseball -- how I made my blog faster: cut CI per push from ~6 min to ~2 min, and kept every home/archive page O(1) in corpus size. Principles: compute once at input-change time, put the result under a stable URL, let everything downstream pull it from cache.
https://benjaminhan.net/posts/20260511-site-efficiency/?utm_source=mastodon&utm_medium=social
-
This week's #WebOrigami comic: Track changes in your site
More about Origami's Dev.changes builtin: https://weborigami.org/builtins/dev/changes
HTML comic: https://weborigami.org/comics/track-changes-in-your-site.htmlThis Origami tool works with any #staticsite generator!
-
Most cache misconfiguration is not carelessness, it's a missing handshake.
Your build encodes assumptions: hashed filenames mean the URL changes whenever the content changes. The web server has to know that, or the assumption stays unused.
If the config doesn't reflect what the build produces, the framework's work gets quietly undone at the last layer of the chain.
-
Most cache misconfiguration is not carelessness, it's a missing handshake.
Your build encodes assumptions: hashed filenames mean the URL changes whenever the content changes. The web server has to know that, or the assumption stays unused.
If the config doesn't reflect what the build produces, the framework's work gets quietly undone at the last layer of the chain.
-
Most cache misconfiguration is not carelessness, it's a missing handshake.
Your build encodes assumptions: hashed filenames mean the URL changes whenever the content changes. The web server has to know that, or the assumption stays unused.
If the config doesn't reflect what the build produces, the framework's work gets quietly undone at the last layer of the chain.
-
Your site loads. From the outside it works. But: do returning visitors re-download everything on every click? Can the connection be downgraded from HTTPS to HTTP on public WiFi? Does your homepage count as one site in Google's eyes, or two?
For most static sites: no, yes, and yes. The web server config is the last layer most setups never touch.
-
Your site loads. From the outside it works. But: do returning visitors re-download everything on every click? Can the connection be downgraded from HTTPS to HTTP on public WiFi? Does your homepage count as one site in Google's eyes, or two?
For most static sites: no, yes, and yes. The web server config is the last layer most setups never touch.
-
Your site loads. From the outside it works. But: do returning visitors re-download everything on every click? Can the connection be downgraded from HTTPS to HTTP on public WiFi? Does your homepage count as one site in Google's eyes, or two?
For most static sites: no, yes, and yes. The web server config is the last layer most setups never touch.
-
Your site loads. From the outside it works. But: do returning visitors re-download everything on every click? Can the connection be downgraded from HTTPS to HTTP on public WiFi? Does your homepage count as one site in Google's eyes, or two?
For most static sites: no, yes, and yes. The web server config is the last layer most setups never touch.
-
Sidenote: If anyone has good recs for an open source #JavaScript library that can do flipbook-style visualizations for digital #zines embedded in static sites: please let me know 🙏🏿
-
This week's #WebOrigami comic: Group pages
More about Tree.groupBy builtin function: https://weborigami.org/builtins/tree/groupby
HTML comic: https://weborigami.org/comics/group-pages.html -
Un nuovo generatore di siti statici scritto in Crystal porta velocità estrema, template Jinja2 e funzioni moderne per blog e documentazione. #StaticSite #CrystalLang #OpenSource #Linux #Web #Ubuntu #Debian
-
This week's #WebOrigami comic: Serve anything
More about Origami's serve command: https://weborigami.org/builtins/dev/serve
HTML comic: https://weborigami.org/comics/serve-anything.html -
Repost to celebrate the 0.40.0 release:
Launching BSSG - My Journey from Dynamic CMS to Bash Static Site Generator
Announcing the public release of BSSG, a Bash Static Site Generator born from a personal journey away from complex dynamic CMS. Discover a simple, portable alternative for your blog.
-
Repost to celebrate the 0.40.0 release:
Launching BSSG - My Journey from Dynamic CMS to Bash Static Site Generator
Announcing the public release of BSSG, a Bash Static Site Generator born from a personal journey away from complex dynamic CMS. Discover a simple, portable alternative for your blog.
-
Repost to celebrate the 0.40.0 release:
Launching BSSG - My Journey from Dynamic CMS to Bash Static Site Generator
Announcing the public release of BSSG, a Bash Static Site Generator born from a personal journey away from complex dynamic CMS. Discover a simple, portable alternative for your blog.
-
Repost to celebrate the 0.40.0 release:
Launching BSSG - My Journey from Dynamic CMS to Bash Static Site Generator
Announcing the public release of BSSG, a Bash Static Site Generator born from a personal journey away from complex dynamic CMS. Discover a simple, portable alternative for your blog.
-
Repost to celebrate the 0.40.0 release:
Launching BSSG - My Journey from Dynamic CMS to Bash Static Site Generator
Announcing the public release of BSSG, a Bash Static Site Generator born from a personal journey away from complex dynamic CMS. Discover a simple, portable alternative for your blog.
-
Announcing BSSG 0.40.0: RAM-First Build Mode, Fediverse Integration, and Semantic HTML Overhaul
BSSG 0.40.0 is here, delivering a lightning-fast RAM build mode, native Fediverse integration, expanded CLI overrides, and new themes.
https://blog.bssg.dragas.net/2026/03/27/announcing-bssg-0-40-0-ram-mode-fediverse/
-
Announcing BSSG 0.40.0: RAM-First Build Mode, Fediverse Integration, and Semantic HTML Overhaul
BSSG 0.40.0 is here, delivering a lightning-fast RAM build mode, native Fediverse integration, expanded CLI overrides, and new themes.
https://blog.bssg.dragas.net/2026/03/27/announcing-bssg-0-40-0-ram-mode-fediverse/
-
Announcing BSSG 0.40.0: RAM-First Build Mode, Fediverse Integration, and Semantic HTML Overhaul
BSSG 0.40.0 is here, delivering a lightning-fast RAM build mode, native Fediverse integration, expanded CLI overrides, and new themes.
https://blog.bssg.dragas.net/2026/03/27/announcing-bssg-0-40-0-ram-mode-fediverse/
-
Announcing BSSG 0.40.0: RAM-First Build Mode, Fediverse Integration, and Semantic HTML Overhaul
BSSG 0.40.0 is here, delivering a lightning-fast RAM build mode, native Fediverse integration, expanded CLI overrides, and new themes.
https://blog.bssg.dragas.net/2026/03/27/announcing-bssg-0-40-0-ram-mode-fediverse/
-
Announcing BSSG 0.40.0: RAM-First Build Mode, Fediverse Integration, and Semantic HTML Overhaul
BSSG 0.40.0 is here, delivering a lightning-fast RAM build mode, native Fediverse integration, expanded CLI overrides, and new themes.
https://blog.bssg.dragas.net/2026/03/27/announcing-bssg-0-40-0-ram-mode-fediverse/
-
If you don’t like making blogs this is not for you but I have been playing with this and I am really liking it a lot! It’s not as powerful as Hugo or Eleventy but I love the direction this is headed. https://makko.starlightnet.work/ #Blog #Blogging #WebDev #StaticSite #StaticSiteGenerator
-
If you don’t like making blogs this is not for you but I have been playing with this and I am really liking it a lot! It’s not as powerful as Hugo or Eleventy but I love the direction this is headed. https://makko.starlightnet.work/ #Blog #Blogging #WebDev #StaticSite #StaticSiteGenerator
-
If you don’t like making blogs this is not for you but I have been playing with this and I am really liking it a lot! It’s not as powerful as Hugo or Eleventy but I love the direction this is headed. https://makko.starlightnet.work/ #Blog #Blogging #WebDev #StaticSite #StaticSiteGenerator
-
If you don’t like making blogs this is not for you but I have been playing with this and I am really liking it a lot! It’s not as powerful as Hugo or Eleventy but I love the direction this is headed. https://makko.starlightnet.work/ #Blog #Blogging #WebDev #StaticSite #StaticSiteGenerator
-
If you don’t like making blogs this is not for you but I have been playing with this and I am really liking it a lot! It’s not as powerful as Hugo or Eleventy but I love the direction this is headed. https://makko.starlightnet.work/ #Blog #Blogging #WebDev #StaticSite #StaticSiteGenerator
-
🚀 New plugin alert! "Content Counter" lets you display post, page, tag & author counts anywhere on your site using simple shortcodes. 📊 #StaticSite #WebDev #CMS #WebDesign #HeadlessCMS #blogging
👉 Check it out here: https://marketplace.getpublii.com/plugins/content-counter/
-
Who else would use a shared #JavaScript library for #Electron apps to create an deploy #Netlify sites?
https://jan.miksovsky.com/posts/2026/03-05-netlify-dialog-library
-
Yesterday was the "Digital Independence Day", which I only learned of, today. Coincidentally yesterday I wrote my first blog post in years! I used to be on wordpress.com for nearly a decade, then moved my blogging to #g+ #facebook, #linkedin and co.
With the process of shutting down all my #ustech and #bigtech accounts, I felt the need of having a place to myself again, where I could share my thoughts. For now, I've decided to use #zola as a static site generator, which gets hosted to @Codeberg
Here's my successful "Hello, world!" that'll allow me to further my journey towards #digitalindependence as this static site will not only replace my old blogging software, but I plan to replace with it so much more! What a fitting coincidence, to have that post see the light of day on the Digital Independence Day :)
https://pygospa.codeberg.page/posts/hello-world
#zola #wordpresscom #codeberg #woodpeckerci #digitalindependenceday #newblog #newbie #introduction #blogosphere #staticsite #staticsitegenerator #unplugTrump
-
Yesterday was the "Digital Independence Day", which I only learned of, today. Coincidentally yesterday I wrote my first blog post in years! I used to be on wordpress.com for nearly a decade, then moved my blogging to #g+ #facebook, #linkedin and co.
With the process of shutting down all my #ustech and #bigtech accounts, I felt the need of having a place to myself again, where I could share my thoughts. For now, I've decided to use #zola as a static site generator, which gets hosted to @Codeberg
Here's my successful "Hello, world!" that'll allow me to further my journey towards #digitalindependence as this static site will not only replace my old blogging software, but I plan to replace with it so much more! What a fitting coincidence, to have that post see the light of day on the Digital Independence Day :)
https://pygospa.codeberg.page/posts/hello-world
#zola #wordpresscom #codeberg #woodpeckerci #digitalindependenceday #newblog #newbie #introduction #blogosphere #staticsite #staticsitegenerator #unplugTrump
-
#Cloudflare #StaticSite #Pelican #WebDev #Gitea #CI_CD #SelfHosted #LLM
For my site, I wanted a fast, simple static site hosted cheaply. I started to brainstorm with LLMs, and it suggested using GitHub Pages. Since I don't use GitHub, it then suggested Cloudflare Pages. That worked really well. Actually, the LLM was instrumental in onboarding me onto the Cloudflare ecosystem with minimal friction. It was awesome. It wrote the deploy.yaml and it worked well.
1/4
-
#Cloudflare #StaticSite #Pelican #WebDev #Gitea #CI_CD #SelfHosted #LLM
We hit a huge wall with the act_runner docker container completing the actions. Again, the LLM helped immensely. My Docker knowledge is not maven level; it's barely novice level. The LLM made the learning curve almost flat. I ended up (following the LLM's directions) creating a custom.yaml for the runner so it behaved well and connected to the network correctly.
2/4
-
#Cloudflare #StaticSite #Pelican #WebDev #Gitea #CI_CD #SelfHosted #LLM
The setup is local development using Pelican (outlined in an earlier post). After merging and pushing, the runner automatically deploys the site to production. The '--branch' flag allows preview deployments from the branch you push from.
3/4
-
#Cloudflare #StaticSite #Pelican #WebDev #Gitea #CI_CD #SelfHosted #LLM
Overall, deployment is pretty slick. Hosting is fast, on the edge, and free. Thank you, Cloudflare.
4/4
-
Updated my now page today
#Indieweb #NowPage #SmallWeb #quarto #personalwebsite #staticsite
-
Using the Browser’s <canvas> for Data Compression
When building static websites and Single-Page Applications (SPAs), we sometimes need functionality in JavaScript front ends—such as compression—that is usually handled on the back end instead. […]
🔄 https://jstrieb.github.io/posts/canvas-compress/
#browser #webdev #compression #data #javascript #js #datacompression #web #webfrontend #frontend #staticsite #html #canvas #singlepage #singlepageapps
-
Right friends after a LOT of work here we go with the 0.3.2 release of bovine for #selfhosted #forgejo or #gitea #staticwebsite #staticsite just like GitHub/GitLab Pages!
This brings lots of new features from 0.3.x and 0.2.0. This includes the BIG changes from 0.3.x which allows serving sites from other branches, meaning you can test before you release!
-
🚀 Publii Bugfix v0.47.5 is out! 🎉 Markdown editor image insertion fixed, Jimp upgraded, JSON-LD author URLs corrected, error alerts selectable, and Simple theme 3.2.1.0 updated. 🚀 #StaticSite #WebDev #CMS #WebDesign #HeadlessCMS #blog
👉 Full details: https://getpublii.com/blog/release-047.html
-
Mich stresst es, dass ich eine #Wordpress-Seite habe, die ich nicht mehr haben will.
Tatsache ist, dass mein #opendev Netzwerk tot ist. Ich habe seit Ewigkeiten keinen eigenen Podcast mehr aufgenommen und werde dies wohl auch nicht mehr tun. Klar könnte ich nun einfach alles löschen - möchte ich aber nicht bzw. nur ungern (wenn ich auch sicher bin, dass den eh keiner mehr liest bzw. die Folgen hört). Wandeln in eine #StaticSite hat bisher nicht geklappt. Und so schlepp ich es weiter herum… 😩 -
🚀 Publii Theme Update is Here! 🎉
All themes have been updated (Nov 04, 2025). We’ve added 50+ new variable fonts, improved video & iframe handling, and introduced several minor CSS refinements.
👉 https://marketplace.getpublii.com/themes/ -
🚀 Publii Theme Update is Here! 🎉
All themes have been updated (Nov 04, 2025). We’ve added 50+ new variable fonts, improved video & iframe handling, and introduced several minor CSS refinements.
👉 https://marketplace.getpublii.com/themes/ -
🚀 Publii Theme Update is Here! 🎉
All themes have been updated (Nov 04, 2025). We’ve added 50+ new variable fonts, improved video & iframe handling, and introduced several minor CSS refinements.
👉 https://marketplace.getpublii.com/themes/