1 files changed, 75 insertions, 19 deletions
diff --git a/config.toml b/config.toml
index cd71cbf..cabf5d7 100644
--- a/config.toml
+++ b/config.toml
@@ -1,6 +1,5 @@
 default_language = "en-GB"
 base_url = "https://alanpearce.eu"
-redirect_other_hostnames = true
 
 title = "Alan Pearce"
 email = "alan@alanpearce.eu"
@@ -8,42 +7,99 @@ description = "Developer, Emacs User"
 
 domain_start_date = "2014-06-07"
 original_domain = "alanpearce.eu"
+domains = [
+  "alanpearce.eu",
+  "www.alanpearce.eu",
+  "alanpearce.uk",
+  "www.alanpearce.uk",
+  "aln.pe",
+]
+
+oidc_host = "https://id.alanpearce.eu/"
+
+goatcounter = "https://stats.alanpearce.eu/count"
+
+wildcard_domain = "aln.pe"
 
 [[taxonomies]]
-name = "tags"
-feed = true
+  name = "tags"
+  feed = true
+
+[content-security-policy]
+  default-src = [
+    "'none'",
+  ]
+  img-src = [
+    "'self'",
+  ]
+  form-action = [
+    "'none'",
+  ]
+  base-uri = [
+    "'none'",
+  ]
+  image-src = [
+    "'self'",
+    "https://stats.alanpearce.eu",
+  ]
+  script-src = [
+    "'self'",
+    "https://stats.alanpearce.eu",
+  ]
+  style-src = [
+    ## index.html style
+    "'sha256-dCSzNS1o8vygl80V2G2nPTiSOUNvyDnW+06hHS4ZdHQ='",
+    ## atom.xml style
+    "'sha256-CFhPA4p8skr5MyhReF+Tk2GzmYzXdECg8zm+o7EOVPI=",
+    ## cv style
+    "'sha256-FzrPQ6x2ugtwEN5peA8OqpIvrV3uXqkpfUMHG8P2uT0='",
+  ]
+  frame-ancestors = [
+    "https://kagi.com",
+  ]
+  connect-src = [
+    "https://stats.alanpearce.eu/count",
+  ]
+  require-trusted-types-for = [
+    "'script'",
+  ]
 
 [extra.headers]
-cache-control = "max-age=14400"
-x-content-type-options = "nosniff"
-content-security-policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'; frame-ancestors https://kagi.com;"
+  cache-control = "max-age=14400"
+  x-content-type-options = "nosniff"
+  referrer-policy = "strict-origin-when-cross-origin"
+  strict-transport-security = "max-age=63072000; includeSubDomains; preload"
+  cross-origin-resource-policy = "same-site"
 
 [[menus.main]]
-    name = "Home"
-    url = "/"
+  name = "Home"
+  url = "/"
 [[menus.main]]
-    name = "Posts"
-    url = "/post/"
+  name = "Posts"
+  url = "/post/"
 [[menus.main]]
-    name = "Feed"
-    url = "/atom.xml"
+  name = "Feed"
+  url = "/atom.xml"
 [[menus.main]]
-    name = "Tags"
-    url = "/tags/"
+  name = "Tags"
+  url = "/tags/"
 [[menus.main]]
-    name = "Repositories"
-    url = "https://git.alanpearce.eu"
+  name = "Repositories"
+  url = "https://git.alanpearce.eu"
 
 [[menus.me]]
+  name = "Sourcehut"
+  url = "https://sr.ht/~alanpearce/"
+[[menus.me]]
   name = "Codeberg"
   url = "https://codeberg.org/alanpearce"
 [[menus.me]]
-  name = "GitHub"
-  url = "https://github.com/alanpearce/"
-[[menus.me]]
   name = "GitLab"
   url = "https://gitlab.com/alanpearce/"
 [[menus.me]]
+  name = "GitHub"
+  url = "https://github.com/alanpearce/"
+[[menus.me]]
   name = "LinkedIn"
   url = "https://www.linkedin.com/in/alanpearceeu/"
 [[menus.me]]