commit ac42bb6c7f9f30028fbc63f623bf4bba99b725ad from: Omar Polo date: Fri Jan 28 08:34:22 2022 UTC change how the site is built copy the kamid/site "framework" here too; in other words: don't maintain two copies of every page! \o/ commit - 964686ce0b77d06b8c954366db56e9a8d098b1d5 commit + ac42bb6c7f9f30028fbc63f623bf4bba99b725ad blob - f1521270a295bd429b4e962e82efeea04b0b269d blob + 7431a6328c8f7d85d30e234b2d9bf0a5d8b1b36d --- site/Makefile +++ site/Makefile @@ -1,19 +1,70 @@ -.PHONY: all serve-www serve-gemini upload +MANPAGES = ../gmid.1 \ + ../gg.1 -all: gmid.1.html gmid.1.txt +PAGES = index.gmi \ + changelog.gmi \ + contrib.gmi \ + quickstart.gmi -gmid.1.html: ../gmid.1 - ./mdoc2html.sh $? $@ +TITLE_index.gmi = home +TITLE_changelog.gmi = changelog +TITLE_contrib.gmi = contrib +TITLE_quickstart.gmi = quickstart -gmid.1.txt: ../gmid.1 - MANWIDTH=72 man -Tutf8 -l $? | col -b > $@ +REPOLOGY_BANNER = https://repology.org/badge/vertical-allrepos/gmid.svg +REPOLOGY_URL = https://repology.org/project/gmid/versions +SUBST = ./subst GITHUB=https://github.com/omar-polo/gmid \ + VERS=1.7.5 \ + CURV=1.7 \ + NEXTV=1.8 + +SUBST_GEM = ${SUBST} MANEXT=txt EXT=gmi REPOLOGY=${REPOLOGY_URL} +SUBST_WWW = ${SUBST} MANEXT=html EXT=html REPOLOGY=${REPOLOGY_BANNER} + +.PHONY: all dirs manpages serve-www serve-gemini upload clean titles + +all: dirs manpages pages + cp style.css www/ + cp vim-screenshot.png www/ + cp vim-screenshot.png gemini/ + +dirs: + mkdir -p gemini www + +manpages: +.for m in ${MANPAGES} + ./mdoc2html.sh $m www/${m:T}.html + man -O width=65 -Tutf8 -l $m | col -b > gemini/${m:T}.txt +.endfor + +pages: +.for p in ${PAGES} + ${MAKE} titles-gem | ./menu.pl $p gemini > gemini/$p + ${SUBST_GEM} $p >> gemini/$p + + ${SUBST_WWW} TITLE=${TITLE_${p}:Q} header.html > www/${p:.gmi=.html} + ${MAKE} titles-www | ./menu.pl "${p:.gmi=.html}" html >> www/${p:.gmi=.html} + ${SUBST_WWW} $p | ./gem2html >> www/${p:.gmi=.html} + cat footer.html >> www/${p:.gmi=.html} +.endfor + serve-www: - python3 -m http.server 8888 + python3 -m http.server --directory www 8888 serve-gemini: - ../gmid -p 1966 . + gmid -p 1966 ./gemini upload: - rsync --delete -a . op:sites/gmid.omarpolo.com - rsync --delete -a . op:gemini/gmid.omarpolo.com + rsync --delete -a www/ op:sites/gmid.omarpolo.com + rsync --delete -a gemini/ op:gemini/gmid.omarpolo.com + +titles-gem: +.for p in ${PAGES} + @printf "%s %s\n" "${p}" ${TITLE_${p}:Q} +.endfor + +titles-www: +.for p in ${PAGES} + @printf "%s %s\n" "${p:.gmi=.html}" ${TITLE_${p}:Q} +.endfor blob - b505e2ab00a63ed0957a8915891166cdeccd02b2 (mode 644) blob + /dev/null --- site/contrib.html +++ /dev/null @@ -1,232 +0,0 @@ - - - - gmid | contrib - - - - - -
- -
-

contrib

-

- This directory is for additional contributed files which may be - useful. -

-

Contents:

- -
-

Dockerfile

-

- contrib/Dockerfile - is a simple Dockerfile. The resulting image is a classic alpine - linux image with a statically linked gmid installed as - /bin/gmid. -

-

To build the image:

- 
# docker build -f contrib/Dockerfile -t gmid .
-

and then run it with something along the lines of:

- 
# docker run --rm -it -p 1965:1965      \
-        -v gmid.conf:/etc/gmid.conf:ro  \
-        -v path/to/keys:/tls:ro         \
-        -v /var/gemini:/var/gemini:ro   \
-        gmid -c /etc/gmid.conf
-

gencert

-

- contrib/gencert - is a simple script to generate self-signed certificates. -

-

OpenBSD rc file

-

- contrib/gmid - is a sample service file for OpenBSD rc(8). - To install it: -

- 
# cp contrib/gmid /etc/rc.d
-

- then the usual - rcctl [start|stop|enable|restart] gmid - are available. -

-

Systemd unit file

-

- contrib/gmid.service - is a simple service file for - systemd. To install it: -

- 
# cp contrib/gmid.service /lib/systemd/system/gmid.service
-

- then the usual - systemctl [status|start|enable|stop] gmid - commands can be used to manage the server. -

-

Some things to keep in mind:

- -

renew certificates automatically

-

- NB: this script requires features that are - currently available only in the master branch. -

-

- contrib/renew-certs - is a script meant to be run in a crontab that watch for - certificate expiration. It can optionally renew the certs and - restart gmid too. -

-

Read the documentation with: perldoc renew-certs.

-

Vim syntax files

-

- contrib/vim - contains a syntax highlighting for vim. To install it, just - copy the files to ~/.vim - or /usr/share/vim/vimfiles, e.g. -

- 
$ mkdir -p ~/.vim
-$ cp -R contrib/vim/* ~/.vim/
-

To enable Syntastic checker, add to your vimrc:

- 
let g:syntastic_gmid_checkers = ['gmid']
-

The end result is something like this:

- - Screenshot of vim editing gmid.conf with syntax highlighting - - - blob - /dev/null blob + 2ab5c0d1fc7b0e6c12fb00bf177037f64450298c (mode 644) --- /dev/null +++ site/footer.html @@ -0,0 +1,2 @@ + + blob - /dev/null blob + b9f03d2884972722553225322c70853137453486 (mode 755) --- /dev/null +++ site/gem2html @@ -0,0 +1,114 @@ +#!/usr/bin/env perl +# +# Copyright (c) 2022 Omar Polo +# +# Permission to use, copy, modify, and distribute this software for any +# purpose with or without fee is hereby granted, provided that the above +# copyright notice and this permission notice appear in all copies. +# +# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES +# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF +# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR +# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES +# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN +# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF +# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. + +use v5.10; +use strict; +use warnings; + +my $in_pre = 0; +my $in_list = 0; + +while (<>) { + chomp; + if ($in_pre && m/^```/) { + $in_pre = 0; + say ""; + } elsif (!$in_pre && m/^```/) { + if ($in_list) { + $in_list = 0; + say ""; + } + $in_pre = 1; + print "
";
+	} elsif ($in_pre) {
+		say san($_);
+	} elsif ($in_list && m/^$/) {
+		say "";
+		$in_list = 0;
+	} elsif (m/^\*\s+(.*)/) { # NB: at least one space
+		if (!$in_list) {
+			$in_list = "item";
+			say "
    ";
+		} elsif ($in_list eq "link") {
+			$in_list = "item";
+			say "
";
+			say "
    ";
+		}
+		output("li", $1);
+	} elsif (m/^=>\s*([^\s]*)\s*(.*)$/) {
+		my $href = $1;
+		my $alt = $2;
+
+		# special case: images
+		if ($1 =~ /\.(png|jpg|svg)$/) {
+			if ($in_list) {
+				say "
";
+				$in_list = 0;
+			}
+			say "$alt";
+			next;
+		}
+
+		if (!$in_list) {
+			$in_list = "link";
+			say "
    ";
+		} elsif ($in_list eq "item") {
+			$in_list = "link";
+			say "
";
+			say "
    ";
+		}
+		$_ = $alt || $href;
+		say "
  • ". san() ."
    • ";
+	} elsif (m/^###\s*(.*)$/) {
+		output("h3", $1);
+	} elsif (m/^##\s*(.*)$/) {
+		output("h2", $1);
+	} elsif (m/^#\s*(.*)$/) {
+		output("h1", $1);
+	} elsif (m/^>\s*(.*)$/) {
+		output("blockquote", $1);
+	} else {
+		output("p", $_);
+	}
+}
+
+sub san {
+	s/&/\&/g;
+	s//\>/g;
+	return $_;
+}
+
+sub output {
+	my ($tn, $content) = @_;
+
+	if (!$in_list && $tn eq "li") {
+		$in_list = 1;
+		say "
      ";
+	}
+
+	if ($in_list && $tn ne "li") {
+		$in_list = 0;
+		say "
    ";
+	}
+
+	if ($tn eq "p" && $content eq "") {
+		return;
+	}
+
+	$_ = $content;
+	say "<$tn>". san() ."";
+}
blob - b216a5e07a4ab30d183cc145fb704566514f9f5b (mode 644)
blob + /dev/null
--- site/index.html
+++ /dev/null
@@ -1,377 +0,0 @@
-
-
-  
-    gmid
-    
-    
-    
-  
-  
-    
    
-      
-    
    
-    
    gmid
    
-    
    
-      
    A Gemini server
    
-    
    
-    
    Features
    
-    
      
-      
    • sandboxed by default on OpenBSD, FreeBSD and Linux
      • 
-      
    • able to reload the configuration on-the-fly without loosing connections
      • 
-      
    • punycode and IRI support
      • 
-      
    • reverse proxying
      • 
-      
    • CGI and FastCGI support
      • 
-      
    • virtual hosts and per-location rules
      • 
-      
    • low memory footprint
      • 
-      
    • event-based asynchronous I/O model
      • 
-      
    • rich configuration file
      • 
-    
    
-    
    Install
    
-    
    Some distros provide a package — thanks to the maintainers!
    
-    
    
-      
-        Packaging status
-      
-    
    
-    
    Source code and precompiled binaries for linux are available:
    
-    
-    
-    
-    
    
-      When in doubt, compile from source: it’s easy and takes less
-      than a minute on a raspberry pi 3.  The dependencies are:
-    
    
-    
      
-      
    • libevent
      • 
-      
    • OpenSSL/LibreSSL
      • 
-      
    • libtls (from either LibreSSL or LibreTLS)
      • 
-      
    • yacc or GNU bison
      • 
-    
    
-    
    Once all the dependencies are installed, building is as easy as:
    
-    
    $ curl -LO https://github.com/omar-polo/gmid/releases/download/1.7.5/gmid-1.7.5.tar.gz
-$ tar xzvf gmid-1.7.5.tar.gz
-$ cd gmid-1.7.5
-$ ./configure
-$ make
-$ sudo make install # eventually
    
-    
    
-      A SHA256 file is available.  However, that only checks for
-      accidental corruption: you can use signify (SHA256.sig and the
-      public key gmid-1.7.pub) or GPG.  The hash of the signify public
-      key is also included in the SHA256 file and thus signed with my
-      GPG.  The signify public key for the next release ‘gmid-1.8.pub’
-      is also included.
-    
    
-    
-    
    To verify the signatures with signify(1)
    
-    
    $ signify -C -p gmid-1.7.pub -x SHA256.sig
-Signature Verified
-gmid-1.7.pub: OK
-gmid-1.7.5.tar.gz: OK
-gmid-1.8.pub: OK
-gmid.linux.aarch64: OK
-gmid.linux.amd64: OK
    
-    
    Changelog for the last versions
    
-    
    1.7.5 “Space-dye Vest” fifth bugfix release — Released October 15, 2021
    
-    
    This version includes the following bugfix:
    
-    
      
-      
    • don't die when a connection is closed before being accepted by gmid (i.e. handle ECONNRESET)
      • 
-    
    
-    
    
-    
    1.7.4 “Space-dye Vest”  fourth bugfix release — Released September 24, 2021
    
-    
    This version includes the following bugfix:
    
-    
      
-      
    • 
-        fix a possible out-of-bound access when handling a request for
-        a non-existent file in the root directory of a vhost that's
-        matched by the cgi option
-      
      • 
-    
    
-    
    and the relative regression test.
    
-    
    
-    
    1.7.3 “Space-dye Vest” third bugfix release — Released September 18, 2021
    
-    
    Improvements
    
-    
      
-      
    • follows symlinks
      • 
-      
    • improved documentation and added key generation example (thanks! Anna)
      • 
-    
    
-    
    Bugfix
    
-    
      
-      
    • fix syslog logging on FreeBSD.  Reported by Karl Jeacle, thanks!
      • 
-      
    • don't crash if -c is missing in configtest mode (-n).  Reported by heph, thanks!
      • 
-      
    • allow fstat64 on linux (needed by glibc on aarch64).  Reported by pine, thanks!
      • 
-    
    
-    
    
-    
    1.7.2 “Space-dye Vest” second bugfix release — Released July 19, 2021
    
-    
    This version includes the following bugfix:
    
-    
      
-      
    • 
-        An un-initialized field in the configless code path leads to a
-        crash on the first request.
-      
      • 
-    
    
-    
    and the relative regression test.
    
-    
    
-    
    1.7.1 “Space-dye Vest” bugfix release — Released July 11, 2021
    
-    
    This version includes two bugfixes:
    
-    
      
-      
    • use ${MAKE} to recursively call make.
      • 
-      
    • 
-        fix the misleading example in the manpage: macros name may not
-        be reserved words.
-      
      • 
-    
    
-    
    
-    
    1.7 “Space-dye Vest” — Released July 10, 2021
    
-    
    
-      Starting from this version gmid doesn't depend on lex anymore,
-      but yacc is still needed.
-    
    
-    
    New Features
    
-    
      
-      
    • initial fastcgi support!  (it’s still young!)
      • 
-      
    • 
-        added user-defined macros, either via -Dname=val or
-        directly in the configuration file.
-      
      • 
-      
    • new include keyword to load additional configuration files.
      • 
-      
    • new env rule to define environment vars for CGI scripts.
      • 
-      
    • new alias rule to define hostname aliases for a server.
      • 
-      
    • allow root to be specified per-location block.
      • 
-      
    • pidfile support with the new -P cli flag.
      • 
-      
    • 
-        define TLS_VERSION, TLS_CIPHER and
-        TLS_CIPHER_STRENGTH for CGI scripts.
-      
      • 
-    
    
-    
    Improvements
    
-    
      
-      
    • 
-        remove limits on the number of virtual hosts and location
-        blocks that can be defined.
-      
      • 
-      
    • print the datetime when logging to stderr.
      • 
-      
    • 
-        use text/x-patch for .patch and .diff files.
-      
      • 
-      
    • sort the auto index alphabetically.
      • 
-      
    • various improvements to the log management.
      • 
-      
    • drop the dependency on lex.
      • 
-      
    • 
-        added --help as synonym of -h and
-        -V/--version to print the version.
-      
      • 
-      
    • 
-        c-like handling of strings in the configuration file: when
-        two or more strings are next to each-others, are
-        automatically joined into a single string.  This is
-        particularly useful with $-macros.
-      
      • 
-    
    
-    
    Bug fixes
    
-    
      
-      
    • 
-        correctly handle CGI scripts that replies with the maxium
-        header length allowed.
-      
      • 
-      
    • fixed the static target.
      • 
-      
    • 
-        fixed recursive mkdirs for configless mode (i.e. create
-        ~/.local/share/gmid)
-      
      • 
-      
    • 
-        logs sent to syslog now have proper priority (before every
-        message ended up as LOG_CRIT).  Found by Anna
-        “CyberTailor”, thanks!
-      
      • 
-      
    • 
-        ensure %p (path) is always absolute in
-        block return rules.
-      
      • 
-      
    • 
-        fix automatic certificate generation, it caused problems on
-        some adroid devices.  Found by Gnuserland, thanks!
-      
      • 
-      
    • document the log rule.
      • 
-      
    • 
-        the seccomp filter was reworked and now it’s known to
-        work properly on a vast range of architectures (to be more
-        specific: all the architectures supported by alpine linux),
-        see github issue #4.  Prompted and tested by @begss, thanks!
-      
      • 
-      
    • 
-        various improvements to the configure script, notified and
-        fixed by Anna “CyberTailor”, thanks!
-      
      • 
-      
    • added a timeout to the regression tests.
      • 
-    
    
-    
    Breaking changes
    
-    
      
-      
    • 
-        if duplicate rules are found in the configuration file, an
-        error is now raised instead of silently using only the last
-        value.
-      
      • 
-      
    • 
-        (sort of) gg moved to regress as
-        it's only used in the regression suite.
-      
      • 
-      
    • 
-        (notice) the mime "mime-type" "extension" rule was deprecated and
-        replaced by the new map "mime-type" to-ext "extension".  The
-        mime rule will be removed in a future version
-        because its syntax is incompatible with the new string
-        auto-concat mechanism.
-      
      • 
-    
    
-  
-
blob - /dev/null
blob + 6b63898cfe346113a3c9361b179ddeccdfba557b (mode 644)
--- /dev/null
+++ site/header.html
@@ -0,0 +1,9 @@
+
+
+    
+        TITLE | gmid
+        
+        
+        
+    
+    
blob - 739e414e1ee54b7ad842ea9f13cb3e936dc3675c (mode 644)
blob + /dev/null
--- site/quickstart.html
+++ /dev/null
@@ -1,291 +0,0 @@
-
-
-  
-    gmid quickstart
-    
-    
-    
-  
-  
-    
    
-      
-    
    
-    
    gmid quickstart
    
-    
    gmid can be run in two different “modes”:
    
-    
    
-      
    configless:
    
-      
    
-        a quick way to serve a directory tree from the shell, useful
-        for testing a capsule before uploading it
-      
    
-      
    daemon mode:
    
-      
    
-        gmid reads the configuration file and runs in the background
-      
    
-    
    
-    
    To run gmid in the “configless” mode, just type:
    
-    
    $ gmid path/to/dir
    
-    
    
-      gmid will then generate a certificate inside ~/.local/share/gmid
-      and serve the given directory locally.
-    
    
-    
    Setting up a capsule with gmid
    
-    
    
-      To host a Gemini capsule you need to run gmid in “daemon”
-      mode, and so a configuration file is needed. The format of the
-      configuration file is described in the manpage and is quite
-      flexible, but something like the following should be enough to
-      start:
-    
    
-    
    # /etc/gmid.conf
-
-server "example.com" {
-	cert "/etc/ssl/example.com.pem"
-	key  "/etc/ssl/private/example.com/key"
-
-	# path to the root directory of your capsule
-	root "/var/gemini/example.com"
-}
    
-    
    
-      A certificate is needed for the capsule.  Generate one for
-      e.g. using
-      contrib/gencert:
-    
    
-    
    $ ./contrib/gencert example.com
-Generating a 4096 bit RSA private key
-.................................................++++
-..........++++
-writing new private key to './example.com.key'
------
-
-Generated files:
-        ./example.com.pem : certificate
-        ./example.com.key : private key
    
-    
    
-      Move ‘example.com.pem’ and ‘example.com.key’ to a safe place and
-      double check that the ‘cert’ and ‘key’ options in the
-      configuration points to these files.
-    
    
-    
    For example, save them in ‘/etc/ssl/’ (as root)
    
-    
    # mkdir -p /etc/ssl/private
-# chown 700 /etc/ssl/private
-# mv example.com.pem /etc/ssl/
-# mv example.com.key /etc/ssl/private/
    
-    
    
-      Make sure that the ‘cert’ and ‘key’ options in the configuration
-      file points to these files.
-    
    
-    
    Then running gmid is as easy as
    
-    
    $ gmid -c /etc/gmid.conf
    
-    
    Congratulations, your capsule is online!
    
-    
    Securing your gmid installation
    
-    
    
-      gmid employs various techniques to prevent the damage caused by
-      bugs, but some steps needs to be done manually.
-    
    
-    
    
-      If gmid was installed from your distribution package manager,
-      chance are that it already does all of this and is also
-      providing a service to run gmid automatically (e.g. a rc script,
-      a systemd unit file …)  Otherwise, it’s heavily suggested to
-      create at least a dedicated user.
-    
    
-    
    A dedicated user
    
-    
    
-      Ideally, gmid should be started as root and drop privileges to a
-      local user.  This way, the certificates can be readable only by
-      root.  For example, on GNU/linux systems a ‘gmid’ user can be
-      created with:
-    
    
-    
    # useradd --system --no-create-home -s /bin/nologin -c "gmid Gemini server" gmid
    
-    
    
-      Please consult your OS documentation for more information on the
-      matter.
-    
    
-    
    
-      The configuration then needs to be adjusted to include the
-      ‘user’ directive at the top:
-    
    
-    
    # /etc/gmid.conf
-user "gmid"
-
-server "example.com" { … }
    
-    
    
-      gmid then needs to be started with root privileges, but will
-      then switch to the provided user automatically.  If by accident
-      the ‘user’ option is omitted and gmid is running as root, it
-      will complain loudly in the logs.
-    
    
-    
    chroot
    
-    
    
-      It’s a common practice for system daemons to chroot themselves
-      into a directory.  From here on I’ll assume /var/gemini, but it
-      can be any directory.
-    
    
-    
    
-      A chroot on UNIX-like OS is an operation that changes the
-      “apparent” root directory (i.e. the “/”) from the current
-      process and its child.  Think of it like imprisoning a process
-      into a directory and never letting it escape until it
-      terminates.
-    
    
-    
    
-      Using a chroot may complicate the use of CGI scripts, because
-      then all the dependencies of the scripts (sh, perl, libraries…)
-      need to be installed inside the chroot too.  For this very
-      reason gmid supports FastCGI.
-    
    
-    
    
-      The chroot feature requires a dedicate user, see the previous
-      section.
-    
    
-    
    
-      To chroot gmid inside a directory, use the ‘chroot’ directive in
-      the configuration file:
-    
    
-    
    # /etc/gmid.conf
-
-user "gmid"
-
-# the given directory, /var/gemini in this case, must exists.
-chroot "/var/gemini"
    
-    
    
-      Note that once ‘chroot’ is in place, every ‘root’ directive is
-      implicitly relative to the chroot, but ‘cert’ and ‘key’ aren’t!
-    
    
-    
    For example, given the following configuration:
    
-    
    # /etc/gmid.conf
-
-user "gmid"
-chroot "/var/gemini"
-
-server "example.com" {
-	cert "/etc/ssl/example.com.pem"
-	key  "/etc/ssl/example.com.key"
-	root "/example.com"
-}
    
-    
    
-      The certificate and the key path are the specified ones, but the
-      root directory of the virtual host is actually
-      “/var/gemini/example.com/”.
-    
    
-  
-
blob - /dev/null
blob + 6c65eea57739000765980931c725e96c7a6d3eed (mode 755)
--- /dev/null
+++ site/menu.pl
@@ -0,0 +1,39 @@
+#!/usr/bin/env perl
+
+use v5.10;
+use strict;
+use warnings;
+
+my $page = shift or die 'missing page';
+my $outtype = shift or die 'missing output type';
+my @pages = ();
+
+while (<>) {
+	chomp;
+	@pages = (@pages, $_);
+}
+
+my $did = 0;
+for (@pages) {
+	my ($href, $text) = m/^([^\s]*)\s*(.*)$/;
+
+	if ($outtype eq 'gemini') {
+		if ($href ne $page) {
+			say "=> $href $text";
+		}
+	} else {
+		if (!$did) {
+			$did = 1;
+		} else {
+			print "| ";
+		}
+
+		if ($href eq $page) {
+			print "$text ";
+		} else {
+			print "$text ";
+		}
+	}
+}
+
+say "";
blob - /dev/null
blob + 026d3c3f1e93d4b85c5571f10f7ceb7c147dcd93 (mode 644)
--- /dev/null
+++ site/style.css
@@ -0,0 +1,116 @@
+body {
+  font-family: monospace;
+  font-size: 14px;
+  max-width: 780px;
+  margin: 0 auto;
+  padding: 20px;
+  padding-bottom: 80px;
+}
+
+h1::before {
+  content: "# ";
+}
+
+h2 {
+  margin-top: 40px;
+}
+
+h2::before {
+  content: "## ";
+}
+
+h3::before {
+  content: "### ";
+}
+
+blockquote {
+  margin: 0;
+  padding: 0;
+}
+
+blockquote::before {
+  content: "> ";
+}
+
+blockquote p {
+  font-style: italic;
+  display: inline;
+}
+
+p.link::before {
+  content: "→ ";
+}
+
+strong::before { content: "*" }
+strong::after  { content: "*" }
+
+hr {
+  border: 0;
+  height: 1px;
+  background-color: #222;
+  width: 100%;
+  display: block;
+  margin: 2em auto;
+}
+
+ul.link-list {
+  list-style: disclosure-closed;
+}
+
+img {
+  border-radius: 5px;
+}
+
+pre {
+  overflow: auto;
+  padding: 1rem;
+  background-color: #f0f0f0;
+  border-radius: 3px;
+}
+
+pre.banner {
+  display: flex;
+  flex-direction: row;
+  justify-content: center;
+}
+
+code, kbd {
+  color: #9d109d;
+}
+
+img {
+  display: block;
+  margin: 0 auto;
+  max-width: 100%;
+}
+
+@media (prefers-color-scheme: dark) {
+  body {
+background-color: #222;
+color: white;
+  }
+
+  a {
+color: aqua;
+  }
+
+  hr {
+background-color: #ddd;
+  }
+
+  pre {
+background-color: #353535;
+  }
+
+  code, kbd {
+color: #ff4cff;
+  }
+}
+
+@media (max-width: 400px) {
+  pre.banner { font-size: 9px; }
+}
+
+@media (max-width: 500px) {
+  pre.banner { font-size: 10px; }
+}
blob - /dev/null
blob + c8f63c0b97b5684486521a5d9f44c75de64107f0 (mode 755)
--- /dev/null
+++ site/subst
@@ -0,0 +1,46 @@
+#!/usr/bin/env perl
+#
+# Copyright (c) 2022 Omar Polo 
+#
+# Permission to use, copy, modify, and distribute this software for any
+# purpose with or without fee is hereby granted, provided that the above
+# copyright notice and this permission notice appear in all copies.
+#
+# THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+# WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+# MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+# ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+# WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+# ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+# OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+#
+# subst -- filter that replaces key=values pairs
+#
+# usage: subst key1=val1 [... keyn=valn] [files...]
+#
+# Use `--' before the first file if it may contain an = in its name.
+# If no files are given, read and substitute from standard input.
+
+use v5.10;
+use strict;
+use warnings;
+
+my @args = ();
+
+while (1) {
+	$_ = shift;
+	last if !$_;
+
+	if ($_ eq '--') {
+		last;
+	} elsif ($_ !~ m/=/) {
+		unshift @ARGV, $_;
+		last;
+	}
+
+	my ($match, $repl) = m/^([^\s]*)=(.*)$/;
+	push @args, "-e", "s,$match,$repl,g";
+}
+
+# OK, shelling out to sed is a bit lame...
+exec "sed", @args, @ARGV;