diff --git a/site/index.html b/site/index.html index dcdf1b6..2e7a0cc 100644 --- a/site/index.html +++ b/site/index.html @@ -588,6 +588,65 @@ color: var(--ink-muted); } + /* Versionsnummeret i sin egen søjle, så øjet kan løbe ned ad dem uden at + læse sætningerne. `ch` frem for pixels: søjlen er lige så bred som de + tal, der står i den, og den følger med, hvis skriften skifter. */ + ul.lately { + list-style: none; + margin: 1.5rem 0 0; + padding: 0; + } + + ul.lately li { + display: grid; + grid-template-columns: 5ch 1fr; + gap: 0 1rem; + padding: 0.875rem 0; + border-top: 1px solid var(--line); + font-size: 0.9375rem; + color: var(--ink-muted); + } + + ul.lately .ver { + font-family: var(--font-mono); + font-size: 0.8125rem; + color: var(--ink-faint); + /* Tallet står på linje med den første tekstlinje og ikke over den. */ + line-height: 1.7; + } + + @media (max-width: 520px) { + ul.lately li { + grid-template-columns: 1fr; + gap: 0.25rem; + } + } + + /* Risikoen står i kort, ikke i småt. + Et forbehold sat med mindre skrift end resten er et forbehold, der er + skrevet for at kunne peges på bagefter — og det er den ene ting, denne + side ikke skal gøre. Samme størrelse som alt andet. */ + .risk { + border: 1px solid var(--line-strong); + border-radius: var(--radius-lg); + padding: 1.5rem; + background: var(--surface); + } + + .risk p { + margin: 0 0 1rem; + font-size: 0.9375rem; + color: var(--ink-muted); + } + + .risk p:last-child { + margin-bottom: 0; + } + + .risk strong { + color: var(--ink); + } + /* The non-goals were one paragraph of seven sentences, which is the shape nobody reads. Each is its own line now, and they can be counted. */ ul.nogo { @@ -1121,6 +1180,43 @@ +
+

Lately

+

+ A landing page can say a project is alive; a list of what landed says it + better. This is not a changelog — every release has notes, and they are on + the releases page. +

+ +
+

Running it

@@ -1168,6 +1264,41 @@
+
+

At your own risk

+
+

+ verdande is MIT licensed and provided as is, without warranty of + any kind. That sentence is in every MIT licence and it is usually + skipped, so here it is in the open: if you run this, you run it at your + own risk, and nobody is on the hook if it loses your work. +

+

+ It is one person's project, at version 0.x, and 0.x means the shape can + still change. You host it, so the data and the backups are + yours. It writes a backup every night and keeps fourteen — and a + backup nobody has ever restored is not yet a backup. Restore one before + you need to. +

+

+ Security is worked on rather than claimed. There have been two full + reviews of the code, every finding is written down and closed, and what is + protected and what is not is spelled out in + SECURITY.md + — including the parts that are a deliberate trade-off. Nobody + outside the project has audited it. The last review found two ways + to reach something you should not and closed both; a third review will find + more, which is the point of having one. +

+

+ It is built to sit behind something — a tunnel, a reverse proxy, a VPN — + put there by somebody who knows what they exposed. Found a hole? Mail it + rather than opening an issue; the address is in SECURITY.md and you get an + answer within a week. +

+
+
+