Tech Stack

A colophon — how this site is built and why. It is a plain static site: hand-written HTML, one build step, no framework, no tracking. The whole thing is small enough to read in a few minutes on GitHub.

The stack

Markup — hand-written HTML. No framework, no client-side rendering.
Styles — Tailwind CSS, compiled to a single minified stylesheet at build time. Only the classes actually used are shipped.
Type — Public Sans (SIL Open Font License), self-hosted, subset to Latin and trimmed to the weights in use, then versioned, preloaded, and cached for a year. No font CDN.
Icons — self-hosted SVGs. The page makes no third-party requests when it loads.
Scripts — two small vanilla-JS files: a light/dark toggle and a contact address assembled in the browser to cut scraping. No bundler, no analytics, no cookies.

Hosting & build

Cloudflare Pages is the primary host and Netlify is a second, independent one. Both rebuild from the same repository on every push — compile the CSS, then serve the static output from their own CDN edges. The build is a single command; there is nothing to run server-side.

Redundancy

Availability is treated as two separate problems — keeping the site reachable, and keeping its source recoverable — and each is solved independently:

Reachable — two independent serving hosts from one source, so a single provider outage doesn't take the site down.
Recoverable — the repository is mirrored to Codeberg, Gitea, and GitLab alongside GitHub and kept in sync automatically. No single code host is a point of failure.
Preserved — the site is snapshotted by the Internet Archive's Wayback Machine after every deploy, outside every host above.

The full list of hosts, forges, and archives lives on the mirrors page.

Privacy & security

A strict Content-Security-Policy (default-src 'self') — the browser only ever talks to this origin.
Security headers on every response: MIME-sniffing off, framing denied, a strict referrer policy, and camera / microphone / geolocation disabled.
No analytics, no cookies, no third-party embeds, no external fonts or CDNs. Nothing to consent to because nothing is collected.

Identity & payments

A few .well-known endpoints serve live lookups — Nostr NIP-05 name verification, a Lightning LNURL-pay address, and a Keybase proof — served with the right headers on every host, so they keep working no matter which mirror answers.

Design

Monochrome and minimal, in Public Sans. The theme is light or dark automatically, following your system; the small mark in the top-left corner toggles it, and your choice is remembered.