enable pledging of the main process not particularly interesting (and to be fair also quite large) but it doesn't touch untrusted data: all it does is waiting for signals to either reload the config (and the socket) or terminate.

add missing \n in usage

use /* fallthrough */ to please the compiler

be portable: switch to a custom version of Kristaps' oconfigure

style; parenthesize returns

simplify the configuration format don't require the awkward `server' block, just use a `proxy' block: proxy { source address port xyz hostname foo stylesheet "URL" }

initial import