Blog: the vhost serves security.txt like the installed copy (#21)

OP OpenVibers committed 10 Oct 2026 · 74d081987e · 1 file, +1 −0

nginx only, bringing the repo in line with production. The installed vhost serves the host's `/.well-known/security.txt` (`include snippets/security-txt.conf;`) in the site's main server block, and the repo file lacked that line, so installing the repo's vhost (as the case-insensitive `/internal/`/`/metrics` sweep needs) would have dropped it. With this line, the repo file is production plus the repo's newer changes. Checked with `nginx -t` on the host.

Changes

ddiff --git a/deploy/nginx/openvibe.blog.conf b/deploy/nginx/openvibe.blog.conf
iindex f19dbfc..5eebda4 100644
---- a/deploy/nginx/openvibe.blog.conf
++++ b/deploy/nginx/openvibe.blog.conf
@@@ -42,6 +42,7 @@ server {
      listen [::]:443 ssl;
      http2 on;
      server_name openvibe.blog;
++    include snippets/security-txt.conf;   # /.well-known/security.txt (the host's file)
  
      ssl_certificate     /etc/letsencrypt/live/openvibe.blog/fullchain.pem;
      ssl_certificate_key /etc/letsencrypt/live/openvibe.blog/privkey.pem;