oops dont default to that

sometimes do hot backups
home: update back urls
2026-07-25 21:36:41 +01:00 · 2026-07-25 21:31:15 +01:00 · 2026-07-24 16:43:49 +01:00 · 2026-07-24 16:41:00 +01:00 · 2026-07-24 16:31:15 +01:00 · 2026-07-24 13:24:33 +01:00
20 changed files with 139 additions and 59 deletions
@@ -5,8 +5,23 @@

 atom.town {
    root * /srv/home
-    file_server
    encode zstd
+
+    # /index.html -> /
+    @indexhtml path_regexp idx ^(.*/)index\.html$
+    redir @indexhtml {re.idx.1} permanent
+
+    # /something.html -> /something
+    @html path_regexp strip ^(.+)\.html$
+    redir @html {re.strip.1} permanent
+
+    # something -> something.html
+    try_files {path} {path}.html {path}/index.html
+
+    file_server
+
+    @assets path /assets/*
+    header @assets Cache-Control "public, max-age=604800, immutable"
 }

 post.atom.town {
@@ -11,3 +11,4 @@ here, you will be at home.
  - [gitea](docs/services/gitea.md)
 - [backups](docs/backups.md)
 - [misc](docs/misc.md)
+- [todo](docs/todo.md)
@@ -11,7 +11,8 @@ always remember to `docker compose stop` before doing any of this!
 - to back up automatically, run `sudo EDITOR=micro crontab -e` and add the following:
  ```
  TZ=UTC
-  0 6 * * * /home/admin/atom.town/scripts/volume-backup.sh
+  0 6 * * * /home/admin/atom.town/scripts/volume-backup.sh cold
+  0 0,12,18 * * * /home/admin/atom.town/scripts/volume-backup.sh hot
  ```

 **restoring**
@@ -2,3 +2,7 @@

 > [!NOTE]
 > **todo** // detail setup
+
+**useful links**
+
+- https://caddyserver.com/docs/
@@ -37,3 +37,7 @@
    - client id (key): `gitea`
    - client secret: `<secret_from_stalwart>`
    - openid connect auto discovery url: `https://post.atom.town/.well-known/openid-configuration`
+
+**useful links**
+
+- https://docs.gitea.com/
@@ -7,7 +7,7 @@
    - `sudo su - admin`
 3. use the system setup script, and log out
    - `sudo dnf install git -y`
-    - `git clone https://git.atom.town/atom/town`
+    - `git clone https://git.atom.town/atom/town && mv town atom.town`
    - `./atom.town/scripts/system-setup.sh`
    - `exit`
 4. log in again, populate the `.env` and start everything up
@@ -1,10 +1,12 @@
 ## todo

- write terms of service & privacy policy
- further secure the server (ratelimiting, hardening...)
- ~~figure out best way to store .env, other credentials, and various secrets~~
- more services
-  - ~~gitea (need to change host ssh port)~~
-  - vaultwarden
- ~~tie all services together with an sso~~
- use postgres for everything
+- [ ] put branding on more stuff (images, themes...)
+- [ ] further secure the server (ratelimiting, hardening...)
+- [ ] (maybe) user sites or pages hosting
+- [ ] (maybe) gitea actions runner
+- [ ] more services
+  - [x] gitea (need to change host ssh port)
+  - [ ] vaultwarden
+- [x] write terms of service & privacy policy
+- [x] figure out best way to store .env, other credentials, and various secrets
+- [x] tie all services together with an sso
@@ -3,21 +3,22 @@
 <head>
    <meta charset="UTF-8" />
    <title>atom.town</title>
-    <link rel="preconnect" href="https://rsms.me/">
-    <link rel="stylesheet" href="https://rsms.me/inter/inter.css">
+    <link rel="stylesheet" href="style/fonts.css">
    <link rel="stylesheet" href="style/reset.css">
    <link rel="stylesheet" href="style/style.css">
-    <link rel="icon" type="image/png" href="assets/logo_icon.png" />
+    <link rel="icon" type="image/avif" href="assets/logo_icon.avif">
+    <link rel="preload" as="image" href="assets/clouds.avif">
+    <link rel="preload" as="font" href="assets/InterVariable-Italic.woff2" crossorigin>
 </head>
 <body>
-    <img src="assets/logo.png" class="logo" />
+    <img src="assets/logo.avif" class="logo" />
    <div class="flex flex-col gap-8 mt-4">
        <p class="font-light">hello, and welcome to atom.town. here, you will be at home.</p>
-        <div class="flex flex-col">
+        <div class="flex flex-col w-fit">
            <a href="https://mail.atom.town" target="_blank" class="font-normal pop big">webmail</a>
            <a href="https://git.atom.town" target="_blank" class="font-normal pop big">git</a>
        </div>
-        <div class="flex flex-col">
+        <div class="flex flex-col w-fit">
            <a href="terms-privacy.html" class="font-normal pop big">terms & privacy</a>
            <a href="setup.html" class="font-normal pop big">setup</a>
        </div>
@@ -3,25 +3,29 @@
 <head>
    <meta charset="UTF-8" />
    <title>atom.town</title>
-    <link rel="preconnect" href="https://rsms.me/">
-    <link rel="stylesheet" href="https://rsms.me/inter/inter.css">
+    <link rel="stylesheet" href="style/fonts.css">
    <link rel="stylesheet" href="style/reset.css">
    <link rel="stylesheet" href="style/style.css">
-    <link rel="icon" type="image/png" href="assets/logo_icon.png" />
+    <link rel="icon" type="image/avif" href="assets/logo_icon.avif">
+    <link rel="preload" as="image" href="assets/clouds.avif">
+    <link rel="preload" as="font" href="assets/InterVariable-Italic.woff2" crossorigin>
 </head>
 <body>
-    <img src="assets/logo.png" class="logo" />
-    <div class="flex flex-col gap-8 mt-4">
-        <p class="font-light">some notes for stuff you might need to know</p>
+    <img src="assets/logo.avif" class="logo" />
+    <div class="flex flex-col gap-8 mt-4 max-w-md">
+        <p class="font-light">things that are useful to know</p>
        <div class="flex flex-col gap-2">
            <h2 class="font-heavy big">email</h2>
-            <ul>
-                <li class="font-light">the mailserver lives at <b>post.atom.town</b></li>
-                <li class="font-light">incoming mail uses <b>imap</b> with <b>ssl/tls</b> on port <b>993</b></li>
-                <li class="font-light">outgoing mail uses <b>smtp</b> with <b>ssl/tls</b> on port <b>465</b></li>
+            <ul class="font-light">
+                <li>the mailserver lives at <b>post.atom.town</b></li>
+                <li>incoming mail uses <b>imap</b> with <b>ssl/tls</b> on port <b>993</b></li>
+                <li>outgoing mail uses <b>smtp</b> with <b>ssl/tls</b> on port <b>465</b></li>
+            </ul>
+            <ul class="font-light">
+                <li>the mailserver also has a few other functions. it is an admin dashboard, which anyone can use to configure their own email account, and also the oidc (auth) provider.</li>
            </ul>
        </div>
-        <a href="##" onclick="history.go(-1)" class="self-start font-normal pop">← back</a>
+        <a href="/index.html" class="self-start font-normal pop">← back</a>
    </div>
 </body>
 </html>
@@ -0,0 +1,16 @@
+/* http://rsms.me/inter/font-files/InterVariable.woff2 */
+@font-face {
+  font-family: InterVariable;
+  font-style: normal;
+  font-weight: 100 900;
+  font-display: swap;
+  src: url("../assets/InterVariable.woff2") format('woff2');
+}
+/* http://rsms.me/inter/font-files/InterVariable-Italic.woff2 */
+@font-face {
+  font-family: InterVariable;
+  font-style: italic;
+  font-weight: 100 900;
+  font-display: swap;
+  src: url("../assets/InterVariable-Italic.woff2") format('woff2');
+}
@@ -1,19 +1,17 @@
 :root {
-    font-family: Inter, sans-serif;
-    font-feature-settings: 'liga' 1, 'calt' 1;
-    @supports (font-variation-settings: normal) {
    font-family: InterVariable, sans-serif;
-    }
+    font-feature-settings: 'liga' 1, 'calt' 1;
 }

 html {
    background: url("../assets/clouds.avif"), linear-gradient(180deg, hwb(230 20% 0%) 0%, hwb(230 90% 0%) 110%);
    background-repeat: no-repeat;
    background-size: cover, cover;
+    background-attachment: fixed;
 }

 body {
-    height: 100dvh;
+    min-height: 100dvh;
    padding: 20px;
 }

@@ -34,7 +32,7 @@ ul {
 /* tailwind lite */
 :root { --space: 4px; }

-.flex { display: flex; width: fit-content; }
+.flex { display: flex; }
 .flex-col { flex-direction: column; }

 .gap-2 { gap: calc(var(--space) * 2); }
@@ -45,18 +43,32 @@ ul {

 .self-start { align-self: flex-start; }

+.justify-between { justify-content: space-between; }
+
+.w-fit { width: fit-content; }
+
+.items-center { align-items: center; }
+
+.font-extralight { font-weight: 200; }
 .font-light { font-weight: 300; }
 .font-normal { font-weight: 400; }
 .font-heavy { font-weight: 500; }

 .max-w-md {
-    max-width: calc(var(--space) * 160);
+    max-width: calc(var(--space) * 180);
    @media (max-width: 1024px) {
-        max-width: calc(var(--space) * 320);
+        max-width: calc(var(--space) * 360);
    }
 }
 /* tailwind lite */

+.small {
+    font-size: 16px;
+    @media (max-width: 1024px) {
+        font-size: 32px;
+    }
+}
+
 .big {
    font-size: 24px;
    @media (max-width: 1024px) {
@@ -73,6 +85,11 @@ ul {
    transform: scale(1.25);
 }

+.hover {
+    text-decoration: underline dotted;
+    text-decoration-thickness: 1px;
+}
+
 .logo {
    object-fit: contain;
    align-self: flex-start;
@@ -3,33 +3,37 @@
 <head>
    <meta charset="UTF-8" />
    <title>atom.town</title>
-    <link rel="preconnect" href="https://rsms.me/">
-    <link rel="stylesheet" href="https://rsms.me/inter/inter.css">
+    <link rel="stylesheet" href="style/fonts.css">
    <link rel="stylesheet" href="style/reset.css">
    <link rel="stylesheet" href="style/style.css">
-    <link rel="icon" type="image/png" href="assets/logo_icon.png" />
+    <link rel="icon" type="image/avif" href="assets/logo_icon.avif">
+    <link rel="preload" as="image" href="assets/clouds.avif">
+    <link rel="preload" as="font" href="assets/InterVariable-Italic.woff2" crossorigin>
 </head>
 <body>
-    <img src="assets/logo.png" class="logo" />
+    <img src="assets/logo.avif" class="logo" />
    <div class="flex flex-col gap-8 mt-4 max-w-md">
-        <p class="font-light">here you can learn some things</p>
+        <p class="font-light">atom.town is an exclusive club of like-minded individuals. by using atom.town, you agree to everything stated on this page.</p>
        <div class="flex flex-col gap-2">
            <h2 class="font-heavy big">terms</h2>
-            <ul>
-                <li class="font-light">the fitnessgram pacer test is a multistage aerobic capacity test</li>
-                <li class="font-light">that progressively gets more difficult as it continues. the 20 meter pacer test</li>
-                <li class="font-light">will begin in 30 seconds. line up at the start. the running speed starts slowly,</li>
+            <ul class="font-light">
+                <li>you will not use atom.town in any way that would negatively impact other users, nor anyone else.</li>
+                <li>you will not use atom.town for bulk file storage (storing large files, or large volumes of files), even if such capabilities are present.</li>
+                <li>for any projects you host (or contribute to) on atom.town, llm usage will be <span title="while atom.town welcomes llms as a useful tool, they should be utilised sparingly, as it is all too easy to fall into the pit of overuse." class="hover">sparse</span>. largely unsupervised or unreviewed code is strongly prohibited.</li>
            </ul>
        </div>
        <div class="flex flex-col gap-2">
            <h2 class="font-heavy big">privacy</h2>
-            <ul>
-                <li class="font-light">but gets faster each minute after you hear this signal *boop*. a single lap should be completed</li>
-                <li class="font-light">each time you hear this sound *ding*. remember to run in a straight line, and run as long as possible.</li>
-                <li class="font-light">the second time you fail to complete a lap before the sound, your test is over. the test will begin on the word start. on your mark, get ready, start.</li>
+            <ul class="font-light">
+                <li>atom.town is hosted on a <a href="https://datalix.eu/privacypolicy" target="_blank">datalix</a> server in germany. atom.town uses <a href="https://www.borgbase.com/privacy" target="_blank">borgbase</a> for backups (which are encrypted before upload).</li>
+                <li>atom.town (for now, indefinitely) collects ip addresses, account details, and any user data only for the purposes of system administration and provision of services.</li>
+                <li>atom.town does not share, nor ever will share any information it collects with any third parties, beyond what is absolutely necessary to run the service.</li>
            </ul>
        </div>
-        <a href="##" onclick="history.go(-1)" class="self-start font-normal pop">← back</a>
+        <div class="flex justify-between items-center">
+            <a href="/index.html" class="self-start font-normal pop">← back</a>
+            <p class="font-extralight small">updated 2026-07-24 (<a href="https://git.atom.town/atom/town/commits/branch/main/home/terms-privacy.html" target="_blank" class="small">history</a>)</p>
+        </div>
    </div>
 </body>
 </html>
@@ -78,7 +78,7 @@ banner bottom "updated system"

 # install misc
 banner top "installing misc packages"
-sudo dnf install -y micro btop fastfetch policycoreutils-python-utils
+sudo dnf install -y micro btop gdu fastfetch policycoreutils-python-utils
 curl -fsSL https://vykar.borgbase.com/install.sh | sh
 banner bottom "installed misc packages"

@@ -109,14 +109,14 @@ banner bottom "installed cron"
 banner top "configuring sshd"
 sudo tee /etc/ssh/sshd_config << 'EOF'
 Include /etc/ssh/sshd_config.d/*.conf
-Port 67
+Port 66
 PermitRootLogin no
 PasswordAuthentication no
 KbdInteractiveAuthentication no
 EOF
-sudo semanage port -a -t ssh_port_t -p tcp 67
+sudo semanage port -a -t ssh_port_t -p tcp 66
 sudo systemctl restart sshd
 banner bottom "configuring sshd"

 # finish
-echo -e "done! please log out and log back in with \e[1;5mssh -p 67 $(id -un)@$(curl -s https://checkip.amazonaws.com)\e[0m\n"
+echo -e "done! please log out and log back in with \e[1;5mssh -p 66 $(id -un)@$(curl -s https://checkip.amazonaws.com)\e[0m\n"
@@ -8,19 +8,30 @@ function log() {
    echo "[$(date -Iseconds)] $*" | tee -a "$LOG_FILE"
 }

+MODE="${1:-}"
+if [[ "$MODE" != "cold" && "$MODE" != "hot" ]]; then
+    log "usage: $0 [cold|hot]" >&2
+    exit 1
+fi
+
 function cleanup() {
-    log "cleanup: starting docker services"
+    if [[ "$MODE" == "cold" ]]; then
+        log "starting docker services"
        docker compose start || true
+    fi
    log "└───── backup finished ─────┘"
 }
 trap cleanup EXIT

 log "┌────── backup started ─────┐"
+log "mode: $MODE"

 cd "$WORKING_DIR"

-log "stopping docker services"
-docker compose stop
+if [[ "$MODE" == "cold" ]]; then
+    log "stopping docker services"
+    docker compose stop
+fi

 log "running backup"
-/usr/local/bin/vykar backup
+/usr/local/bin/vykar backup 2>&1 | tee -a "$LOG_FILE"
Author	SHA1	Message	Date
futile	5ee5a2cfb0	oops dont default to that	2026-07-25 21:36:41 +01:00
futile	f6cfb706da	sometimes do hot backups	2026-07-25 21:31:15 +01:00
futile	7d4f8ca9c5	home: update back urls	2026-07-24 16:43:49 +01:00
futile	3b661a698e	update caddyfile	2026-07-24 16:41:00 +01:00
futile	132cc91d06	update caddyfile	2026-07-24 16:31:15 +01:00
futile	0fbe068197	update readme	2026-07-24 13:24:33 +01:00
futile	2ebf7ca958	scripts: update ssh port	2026-07-24 13:23:49 +01:00
futile	08c4c78c8e	scripts: add gdu to packages	2026-07-24 11:12:48 +01:00
futile	9ce6a93b99	home: update setup	2026-07-24 11:11:55 +01:00
futile	a20dc43559	home: amend terms	2026-07-24 11:11:37 +01:00
futile	d56192ce0d	home: update style	2026-07-24 11:11:15 +01:00
futile	28ff6a9fdc	docs: correctly name cloned dir in setup	2026-07-24 10:33:20 +01:00
futile	2ea01a8824	home: link to privacy/terms history	2026-07-24 10:33:07 +01:00
futile	fe775a5a7e	home: amend terms	2026-07-24 10:30:23 +01:00
futile	33eb9d7748	home: add a last updated timestamp to terms & privacy	2026-07-24 10:10:59 +01:00
futile	81486654de	home: update setup	2026-07-23 21:57:53 +01:00
futile	7228c8c131	home: amend terms	2026-07-23 21:54:55 +01:00
futile	977cfb2197	home: improve setup page	2026-07-23 19:10:19 +01:00
futile	0e98866699	update todo	2026-07-23 18:58:47 +01:00
futile	596aa4c3f2	home: write terms & privacy	2026-07-23 18:55:58 +01:00
futile	e5f765dba1	home: simplify back	2026-07-23 17:51:34 +01:00
futile	6a9e5a5b68	docs: add some links	2026-07-23 17:20:31 +01:00
futile	d04b908996	update todo	2026-07-23 15:29:22 +01:00
futile	80b92acd7a	forgor	2026-07-23 14:23:43 +01:00
futile	2cdda03224	home: apply crossorigin to font preloads	2026-07-23 14:22:52 +01:00
futile	840fd46a73	home: optimise images	2026-07-23 14:21:43 +01:00
futile	b7e130a24e	home: host inter font ourselves	2026-07-23 14:07:56 +01:00
futile	3b2d0335bd	home: hopefully make background image load smoother	2026-07-23 13:19:02 +01:00
futile	29f0490924	home: fix bad convention	2026-07-23 13:15:47 +01:00