openvibers/openvibe.codes Commits

Codes: the vhost serves security.txt like the installed copy (#36)

OP OpenVibers committed 10 Oct 2026 · ff892d9ca9 · 1 file, +1 −0

nginx only, bringing the repo in line with production. The installed vhost serves the host's `/.well-known/security.txt` (`include snippets/security-txt.conf;`) in the site's main server block, and the repo file lacked that line, so installing the repo's vhost (as the case-insensitive `/internal/`/`/metrics` sweep needs) would have dropped it. With this line, the repo file is production plus the repo's newer changes. Checked with `nginx -t` on the host.

Changes

ddiff --git a/deploy/nginx/openvibe.codes.conf b/deploy/nginx/openvibe.codes.conf
iindex 051fac5..cee679a 100644
---- a/deploy/nginx/openvibe.codes.conf
++++ b/deploy/nginx/openvibe.codes.conf
@@@ -41,6 +41,7 @@ server {
listen [::]:443 ssl;
http2 on;
server_name openvibe.codes;
++ include snippets/security-txt.conf; # /.well-known/security.txt (the host's file)
ssl_certificate /etc/letsencrypt/live/openvibe.codes/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/openvibe.codes/privkey.pem;