1 files changed, 58 insertions, 19 deletions
diff --git a/config.toml b/config.toml
index cd71cbf..8cf932a 100644
--- a/config.toml
+++ b/config.toml
@@ -1,6 +1,5 @@
 default_language = "en-GB"
 base_url = "https://alanpearce.eu"
-redirect_other_hostnames = true
 
 title = "Alan Pearce"
 email = "alan@alanpearce.eu"
@@ -9,41 +8,81 @@ description = "Developer, Emacs User"
 domain_start_date = "2014-06-07"
 original_domain = "alanpearce.eu"
 
+oidc_host = "https://id.alanpearce.eu/"
+
 [[taxonomies]]
-name = "tags"
-feed = true
+  name = "tags"
+  feed = true
+
+[content-security-policy]
+  default-src = [
+    "'none'",
+  ]
+  form-action = [
+    "'none'",
+  ]
+  base-uri = [
+    "'none'",
+  ]
+  image-src = [
+    "'self'",
+    "https://gc.zgo.at",
+  ]
+  script-src = [
+    "'self'",
+    "https://gc.zgo.at",
+  ]
+  style-src = [
+    # index.html style
+    "'sha256-a4TPKWHB0aSu7cV10GthTEySTJ0w4r0bw6Q8JsNYMbk='",
+    # atom.xml style
+    "'sha256-gyxzfgCOxeAAL8URUdaW2nHYDOr9bzbwFjgSqi7D+8U='",
+  ]
+  frame-ancestors = [
+    "https://kagi.com",
+  ]
+  connect-src = [
+    "https://alanpearce-eu.goatcounter.com/count",
+  ]
+  require-trusted-types-for = [
+    "'script'",
+  ]
 
 [extra.headers]
-cache-control = "max-age=14400"
-x-content-type-options = "nosniff"
-content-security-policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'; frame-ancestors https://kagi.com;"
+  cache-control = "max-age=14400"
+  x-content-type-options = "nosniff"
+  referrer-policy = "strict-origin-when-cross-origin"
+  strict-transport-security = "max-age=63072000; includeSubDomains; preload"
 
 [[menus.main]]
-    name = "Home"
-    url = "/"
+  name = "Home"
+  url = "/"
 [[menus.main]]
-    name = "Posts"
-    url = "/post/"
+  name = "Posts"
+  url = "/post/"
 [[menus.main]]
-    name = "Feed"
-    url = "/atom.xml"
+  name = "Feed"
+  url = "/atom.xml"
 [[menus.main]]
-    name = "Tags"
-    url = "/tags/"
+  name = "Tags"
+  url = "/tags/"
 [[menus.main]]
-    name = "Repositories"
-    url = "https://git.alanpearce.eu"
+  name = "Repositories"
+  url = "https://git.alanpearce.eu"
 
 [[menus.me]]
+  name = "Sourcehut"
+  url = "https://sr.ht/~alanpearce/"
+[[menus.me]]
   name = "Codeberg"
   url = "https://codeberg.org/alanpearce"
 [[menus.me]]
-  name = "GitHub"
-  url = "https://github.com/alanpearce/"
-[[menus.me]]
   name = "GitLab"
   url = "https://gitlab.com/alanpearce/"
 [[menus.me]]
+  name = "GitHub"
+  url = "https://github.com/alanpearce/"
+[[menus.me]]
   name = "LinkedIn"
   url = "https://www.linkedin.com/in/alanpearceeu/"
 [[menus.me]]