diff options
| author | Mitja Felicijan <m@mitjafelicijan.com> | 2023-07-08 23:25:41 +0200 |
|---|---|---|
| committer | Mitja Felicijan <m@mitjafelicijan.com> | 2023-07-08 23:25:41 +0200 |
| commit | cd6644ea4ddc78597934ab0ef5ba50e3c3daa927 (patch) | |
| tree | 03de331a8db6386dfd6fa75155bfbcea6b4feaf3 /public/bringing-all-of-my-projects-together-under-one-umbrella.html | |
| parent | 84ed124529ffeee1590295b8de3a8faf51848680 (diff) | |
| download | mitjafelicijan.com-cd6644ea4ddc78597934ab0ef5ba50e3c3daa927.tar.gz | |
Moved to a simpler SSG
Diffstat (limited to 'public/bringing-all-of-my-projects-together-under-one-umbrella.html')
| -rwxr-xr-x | public/bringing-all-of-my-projects-together-under-one-umbrella.html | 164 |
1 files changed, 164 insertions, 0 deletions
diff --git a/public/bringing-all-of-my-projects-together-under-one-umbrella.html b/public/bringing-all-of-my-projects-together-under-one-umbrella.html new file mode 100755 index 0000000..fa16694 --- /dev/null +++ b/public/bringing-all-of-my-projects-together-under-one-umbrella.html | |||
| @@ -0,0 +1,164 @@ | |||
| 1 | <!doctype html><html lang=en-us><meta charset=utf-8><meta name=viewport content="width=device-width,initial-scale=1"><link href="data:image/x-icon;base64,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" rel=icon type=image/x-icon><title>Bringing all of my projects together under one umbrella</title><meta name=description content="What is the issue anyway?"><link rel=alternate type=application/rss+xml title="Mitja Felicijan's posts" href=https://mitjafelicijan.com/index.xml><link rel=alternate type=application/rss+xml title="Mitja Felicijan's notes" href=https://mitjafelicijan.com/notes.xml><style>body{padding:1rem;max-width:760px;background:#fff;font-family:times new roman,Times,serif;line-height:1.35rem}hr{margin-block-start:1.5rem}h1,h2,h3{line-height:initial}footer{margin-block-start:3rem}table{max-width:100%;border-collapse:separate;border-spacing:2px;border:1px solid #000;border-left:1px solid #999;border-top:1px solid #999}blockquote{font-style:italic}table thead{background:#eee}td,th{border:1px solid #000;padding:4px;border-right:1px solid #999;border-bottom:1px solid #999;text-align:left}pre{text-wrap:nowrap;overflow-x:auto;margin-block-start:1.5rem;margin-block-end:1.5rem;padding:.5rem 0;border-top:1px solid #000;border-bottom:1px solid #000}pre code{line-height:1.3em}pre,code,pre *,code *{font-family:monospace;font-size:initial!important}img,video,audio{max-width:100%}header{display:flex;flex-direction:row;gap:3rem}nav{display:flex;gap:.75rem}.pstatus-orange{background:gold}.pstatus-green{background:#9acd32}.pstatus-red{background:#cd5c5c}@media only screen and (max-width:600px){header{flex-direction:column;gap:1rem}a{word-wrap:break-word}}</style><header><nav class=main><a href=/>Home</a> | ||
| 2 | <a href=https://git.mitjafelicijan.com/ target=_blank>Git</a> | ||
| 3 | <a href=https://files.mitjafelicijan.com/ target=_blank>Files</a> | ||
| 4 | <a href=/mitjafelicijan.pgp.pub.txt target=_blank>PGP</a> | ||
| 5 | <a href=/curriculum-vitae.html>CV</a> | ||
| 6 | <a href=/index.xml target=_blank>RSS</a></nav></header><main><div><h1>Bringing all of my projects together under one umbrella</h1><p>Jul 1, 2023<div><h2 id=what-is-the-issue-anyway>What is the issue anyway?</h2><p>Over the years, I have accumulated a bunch of virtual servers on my | ||
| 7 | <a href=https://www.digitalocean.com/>DigitalOcean</a> account for small experimental | ||
| 8 | projects I dabble in. And this has resulted in quite a bill. I mean, I wouldn't | ||
| 9 | care if these projects were actually being used. But there were just being there | ||
| 10 | unused and wasting resources. Which makes this an unnecessary burden for me.<p>Most of them are just small HTML pages that have an endpoint or two to read data | ||
| 11 | from or to, and for that reason I wrote servers left and right. To be honest, | ||
| 12 | all of those things could have been done with <a href=https://en.wikipedia.org/wiki/Common_Gateway_Interface>CGI | ||
| 13 | scripts</a> and that would | ||
| 14 | have been more than enough.<p>Recently, I decided to stop language hopping and focus on a simpler stack which | ||
| 15 | includes C, Go and Lua. And I can accomplish all the things I am interested in.<h2 id=finding-a-web-server-replacement>Finding a web server replacement</h2><p>Usually I had <a href=https://nginx.org/en/>Nginx</a> in front of these small web servers | ||
| 16 | and I had to manage SSL certificates and all that jazz. I am bored with these | ||
| 17 | things. I don't want to manage any of this bullshit anymore.<p>So the logical move forward was to find a solid alternative for this. I have | ||
| 18 | ended up on <a href=https://caddyserver.com/>Caddy server</a>. I've used it in the past | ||
| 19 | but kind of forgotten about it. What I really like about it is an ease of use | ||
| 20 | and a bunch of out of the box functionalities that come with it.<p>These are the <em>pitch</em> points from their website:<ul><li><strong>Secure by Default</strong>: Caddy is the only web server that uses HTTPS by | ||
| 21 | default. A hardened TLS stack with modern protocols preserves privacy and | ||
| 22 | exposes MITM attacks.<li><strong>Config API</strong>: As its primary mode of configuration, Caddy's REST API makes | ||
| 23 | it easy to automate and integrate with your apps.<li><strong>No Dependencies</strong>: Because Caddy is written in Go, its binaries are entirely | ||
| 24 | self-contained and run on every platform, including containers without libc.<li><strong>Modular Stack</strong>: Take back control over your compute edge. Caddy can be | ||
| 25 | extended with everything you need using plugins.</ul><p>I had just a few requirements:<ul><li>Automatic SSL<li>Static file server<li>Basic authentication<li>CGI script support</ul><p>And the vanilla version does all of it, but CGI scripts. But that can easily be | ||
| 26 | fixed with their modular approach. You can do this on their website and build a | ||
| 27 | custom version of the server, or do it with Docker.<p>This is a <code>Dockerfile</code> I used to build a custom server.<pre tabindex=0 style=background-color:#fff><code><span style=display:flex><span><span style=color:#00f>FROM</span><span style=color:#a31515> caddy:builder AS builder</span><span> | ||
| 28 | </span></span></span><span style=display:flex><span><span> | ||
| 29 | </span></span></span><span style=display:flex><span><span></span><span style=color:#00f>RUN</span> xcaddy build <span style=color:#a31515>\ | ||
| 30 | </span></span></span><span style=display:flex><span><span style=color:#a31515></span> --with github.com/aksdb/caddy-cgi<span> | ||
| 31 | </span></span></span><span style=display:flex><span><span> | ||
| 32 | </span></span></span><span style=display:flex><span><span></span><span style=color:#00f>FROM</span><span style=color:#a31515> caddy:latest</span><span> | ||
| 33 | </span></span></span><span style=display:flex><span><span></span><span style=color:#00f>RUN</span> apk add --no-cache nano<span> | ||
| 34 | </span></span></span><span style=display:flex><span><span> | ||
| 35 | </span></span></span><span style=display:flex><span><span></span><span style=color:#00f>COPY</span> --from=builder /usr/bin/caddy /usr/bin/caddy<span> | ||
| 36 | </span></span></span></code></pre><h2 id=getting-rid-of-all-the-unnecessary-virtual-machines>Getting rid of all the unnecessary virtual machines</h2><p>The next step was to get a handle on the number of virtual servers I have all | ||
| 37 | over the place.<p>I decided to move all the projects and services into two main VMs:<ul><li>personal server (still Nginx)<ul><li>git server<li>static file server<li>personal blog</ul><li>projects server (Caddy server)<ul><li>personal experiments<li>other projects</ul></ul><p>I will focus on projects' server in this post since it's more interesting.<h2 id=testing-cgi-scripts>Testing CGI scripts</h2><p>The first thing I tested was how CGI scripts work under Caddy. This is | ||
| 38 | particularly import to me because almost all of my experiments and mini projects | ||
| 39 | need this to work.<p>To configure Caddy server, you must provide the server with a configuration | ||
| 40 | file. By default, it's called <code>Caaddyfile</code>.<pre tabindex=0 style=background-color:#fff><code><span style=display:flex><span>{ | ||
| 41 | </span></span><span style=display:flex><span> <span style=color:#00f>order</span> <span style=color:#a31515>cgi</span> before <span style=color:#a31515>respond</span> | ||
| 42 | </span></span><span style=display:flex><span>} | ||
| 43 | </span></span><span style=display:flex><span> | ||
| 44 | </span></span><span style=display:flex><span><span style=font-weight:700>examples.mitjafelicijan.com</span> { | ||
| 45 | </span></span><span style=display:flex><span> <span style=color:#00f>cgi</span> /bash-test <span style=color:#a31515>/opt/projects/examples/bash-test.sh</span> | ||
| 46 | </span></span><span style=display:flex><span> <span style=color:#00f>cgi</span> /tcl-test <span style=color:#a31515>/opt/projects/examples/tcl-test.tcl</span> | ||
| 47 | </span></span><span style=display:flex><span> <span style=color:#00f>cgi</span> /lua-test <span style=color:#a31515>/opt/projects/examples/lua-test.lua</span> | ||
| 48 | </span></span><span style=display:flex><span> <span style=color:#00f>cgi</span> /python-test <span style=color:#a31515>/opt/projects/examples/python-test.py</span> | ||
| 49 | </span></span><span style=display:flex><span> | ||
| 50 | </span></span><span style=display:flex><span> <span style=color:#00f>root</span> * <span style=color:#a31515>/opt/projects/examples</span> | ||
| 51 | </span></span><span style=display:flex><span> <span style=color:#00f>file_server</span> | ||
| 52 | </span></span><span style=display:flex><span>} | ||
| 53 | </span></span></code></pre><ul><li>The order is very important. Make sure that <code>order cgi before respond</code> is at | ||
| 54 | the top of the configuration file.<li>Also, when you run with Caddy v2, make sure you provide <code>adapter</code> argument | ||
| 55 | like this <code>/usr/bin/caddy run --watch --environ --config /etc/caddy/Caddyfile --adapter caddyfile</code>. Otherwise, Caddy will try to use a different format for | ||
| 56 | config file.</ul><p>I did a small batch of tests with <a href=https://www.gnu.org/software/bash/>Bash</a>, | ||
| 57 | <a href=https://www.tcl-lang.org/>Tcl</a>, <a href=https://www.lua.org/>Lua</a> and | ||
| 58 | <a href=https://www.python.org/>Python</a>. Here is a cheat sheet if you need it.<p>Let's get Bash out of the way first.<pre tabindex=0 style=background-color:#fff><code><span style=display:flex><span><span style=color:#00f>#!/usr/bin/bash | ||
| 59 | </span></span></span><span style=display:flex><span><span style=color:#00f></span> | ||
| 60 | </span></span><span style=display:flex><span>printf <span style=color:#a31515>"Content-type: text/plain\n\n"</span> | ||
| 61 | </span></span><span style=display:flex><span> | ||
| 62 | </span></span><span style=display:flex><span>printf <span style=color:#a31515>"Hello from Bash\n\n"</span> | ||
| 63 | </span></span><span style=display:flex><span>printf <span style=color:#a31515>"PATH_INFO [%s]\n"</span> $PATH_INFO | ||
| 64 | </span></span><span style=display:flex><span>printf <span style=color:#a31515>"QUERY_STRING [%s]\n"</span> $QUERY_STRING | ||
| 65 | </span></span><span style=display:flex><span>printf <span style=color:#a31515>"\n"</span> | ||
| 66 | </span></span><span style=display:flex><span> | ||
| 67 | </span></span><span style=display:flex><span><span style=color:#00f>for</span> i in {0..9..1}; <span style=color:#00f>do</span> | ||
| 68 | </span></span><span style=display:flex><span> printf <span style=color:#a31515>"> %s\n"</span> $i | ||
| 69 | </span></span><span style=display:flex><span><span style=color:#00f>done</span> | ||
| 70 | </span></span><span style=display:flex><span> | ||
| 71 | </span></span><span style=display:flex><span>exit 0 | ||
| 72 | </span></span></code></pre><p>This one is for Tcl script.<pre tabindex=0 style=background-color:#fff><code><span style=display:flex><span><span style=color:green>#!/usr/bin/tclsh | ||
| 73 | </span></span></span><span style=display:flex><span><span style=color:green> | ||
| 74 | </span></span></span><span style=display:flex><span><span style=color:green></span>puts <span style=color:#a31515>"Content-type: text/plain\n"</span> | ||
| 75 | </span></span><span style=display:flex><span> | ||
| 76 | </span></span><span style=display:flex><span>puts <span style=color:#a31515>"Hello from Tcl\n"</span> | ||
| 77 | </span></span><span style=display:flex><span>puts <span style=color:#a31515>"PATH_INFO \[$env(PATH_INFO)\]"</span> | ||
| 78 | </span></span><span style=display:flex><span>puts <span style=color:#a31515>"QUERY_STRING \[$env(QUERY_STRING)\]"</span> | ||
| 79 | </span></span><span style=display:flex><span>puts <span style=color:#a31515>""</span> | ||
| 80 | </span></span><span style=display:flex><span> | ||
| 81 | </span></span><span style=display:flex><span><span style=color:#00f>for</span> <span style=color:#00f>{set</span> i 0<span style=color:#00f>}</span> <span style=color:#00f>{</span>$i < 10<span style=color:#00f>}</span> <span style=color:#00f>{</span>incr i<span style=color:#00f>}</span> <span style=color:#00f>{</span> | ||
| 82 | </span></span><span style=display:flex><span> puts <span style=color:#a31515>"> $i"</span> | ||
| 83 | </span></span><span style=display:flex><span><span style=color:#00f>}</span> | ||
| 84 | </span></span></code></pre><p>And for all you Python enjoyers.<pre tabindex=0 style=background-color:#fff><code><span style=display:flex><span><span style=color:green>#!/usr/bin/python3</span> | ||
| 85 | </span></span><span style=display:flex><span> | ||
| 86 | </span></span><span style=display:flex><span><span style=color:#00f>import</span> os | ||
| 87 | </span></span><span style=display:flex><span> | ||
| 88 | </span></span><span style=display:flex><span>print(<span style=color:#a31515>"Content-type: text/plain</span><span style=color:#a31515>\n</span><span style=color:#a31515>"</span>) | ||
| 89 | </span></span><span style=display:flex><span> | ||
| 90 | </span></span><span style=display:flex><span>print(<span style=color:#a31515>"Hello from Python</span><span style=color:#a31515>\n</span><span style=color:#a31515>"</span>) | ||
| 91 | </span></span><span style=display:flex><span>print(<span style=color:#a31515>"PATH_INFO [</span><span style=color:#a31515>{}</span><span style=color:#a31515>]"</span>.format(os.environ[<span style=color:#a31515>'PATH_INFO'</span>])) | ||
| 92 | </span></span><span style=display:flex><span>print(<span style=color:#a31515>"QUERY_STRING [</span><span style=color:#a31515>{}</span><span style=color:#a31515>]"</span>.format(os.environ[<span style=color:#a31515>'QUERY_STRING'</span>])) | ||
| 93 | </span></span><span style=display:flex><span>print(<span style=color:#a31515>""</span>) | ||
| 94 | </span></span><span style=display:flex><span> | ||
| 95 | </span></span><span style=display:flex><span><span style=color:#00f>for</span> i <span style=color:#00f>in</span> range(10): | ||
| 96 | </span></span><span style=display:flex><span> print(<span style=color:#a31515>"> </span><span style=color:#a31515>{}</span><span style=color:#a31515>"</span>.format(i)) | ||
| 97 | </span></span></code></pre><p>And for the final example, Lua.<pre tabindex=0 style=background-color:#fff><code><span style=display:flex><span><span style=color:#00f>#!/usr/bin/lua</span> | ||
| 98 | </span></span><span style=display:flex><span> | ||
| 99 | </span></span><span style=display:flex><span>print(<span style=color:#a31515>"Content-type: text/plain</span><span style=color:#a31515>\n</span><span style=color:#a31515>"</span>) | ||
| 100 | </span></span><span style=display:flex><span> | ||
| 101 | </span></span><span style=display:flex><span>print(<span style=color:#a31515>"Hello from Lua</span><span style=color:#a31515>\n</span><span style=color:#a31515>"</span>) | ||
| 102 | </span></span><span style=display:flex><span>print(string.format(<span style=color:#a31515>"PATH_INFO [%s]"</span>, os.getenv(<span style=color:#a31515>"PATH_INFO"</span>))) | ||
| 103 | </span></span><span style=display:flex><span>print(string.format(<span style=color:#a31515>"QUERY_STRING [%s]"</span>, os.getenv(<span style=color:#a31515>"QUERY_STRING"</span>))) | ||
| 104 | </span></span><span style=display:flex><span>print() | ||
| 105 | </span></span><span style=display:flex><span> | ||
| 106 | </span></span><span style=display:flex><span><span style=color:#00f>for</span> i = 0, 9 <span style=color:#00f>do</span> | ||
| 107 | </span></span><span style=display:flex><span> print(string.format(<span style=color:#a31515>"> %d"</span>, i)) | ||
| 108 | </span></span><span style=display:flex><span><span style=color:#00f>end</span> | ||
| 109 | </span></span></code></pre><h2 id=basic-authentication>Basic authentication</h2><p>One thing was also to have an option for some sort of authentication, and | ||
| 110 | something like <a href=https://en.wikipedia.org/wiki/Basic_access_authentication>Basic access | ||
| 111 | authentication</a> would | ||
| 112 | be more than enough.<p>Thankfully, Caddy supports this out of the box already. Below is an updated | ||
| 113 | example.<pre tabindex=0 style=background-color:#fff><code><span style=display:flex><span>{ | ||
| 114 | </span></span><span style=display:flex><span> <span style=color:#00f>order</span> <span style=color:#a31515>cgi</span> before <span style=color:#a31515>respond</span> | ||
| 115 | </span></span><span style=display:flex><span>} | ||
| 116 | </span></span><span style=display:flex><span> | ||
| 117 | </span></span><span style=display:flex><span><span style=font-weight:700>examples.mitjafelicijan.com</span> { | ||
| 118 | </span></span><span style=display:flex><span> <span style=color:#00f>cgi</span> /bash-test <span style=color:#a31515>/opt/projects/examples/bash-test.sh</span> | ||
| 119 | </span></span><span style=display:flex><span> <span style=color:#00f>cgi</span> /tcl-test <span style=color:#a31515>/opt/projects/examples/tcl-test.tcl</span> | ||
| 120 | </span></span><span style=display:flex><span> <span style=color:#00f>cgi</span> /lua-test <span style=color:#a31515>/opt/projects/examples/lua-test.lua</span> | ||
| 121 | </span></span><span style=display:flex><span> <span style=color:#00f>cgi</span> /python-test <span style=color:#a31515>/opt/projects/examples/python-test.py</span> | ||
| 122 | </span></span><span style=display:flex><span> | ||
| 123 | </span></span><span style=display:flex><span> <span style=color:#00f>root</span> * <span style=color:#a31515>/opt/projects/examples</span> | ||
| 124 | </span></span><span style=display:flex><span> <span style=color:#00f>file_server</span> | ||
| 125 | </span></span><span style=display:flex><span> | ||
| 126 | </span></span><span style=display:flex><span> <span style=color:#00f>basicauth</span> * { | ||
| 127 | </span></span><span style=display:flex><span> <span style=color:#00f>bob</span> <span>$</span><span style=color:#a31515>2a</span><span>$</span>14<span>$</span><span style=color:#a31515>/wCgaf9oMnmQa20txB76u.nI1AldGMBT/1J7fXCfgOiRShwz/JOkK</span> | ||
| 128 | </span></span><span style=display:flex><span> } | ||
| 129 | </span></span><span style=display:flex><span>} | ||
| 130 | </span></span></code></pre><p><code>basicauth *</code> matches everything under this domain/sub-domain and protects it | ||
| 131 | with Basic Authentication.<ul><li><code>bob</code> is the username<li><code>hash</code> is the password</ul><p>To generate these passwords, execute <code>caddy hash-password</code> and this will prompt | ||
| 132 | you to insert a password twice and spit out a hashed password that you can put | ||
| 133 | in your configuration file.<p>Restart the server and you are ready to go.<h2 id=making-caddy-a-service-with-systemd>Making Caddy a service with systemd</h2><p>After the tests were successful, I copied <code>caddy</code> to <code>/usr/bin/caddy</code> and copied | ||
| 134 | <code>Caddyfile</code> to <code>/etc/caddy/Caddyfile</code>.<p>Now off to the systemd. Each systemd service requires you to create a service | ||
| 135 | file.<ul><li>I created a <code>/etc/systemd/system/caddy.service</code> and put the following content | ||
| 136 | in the file.</ul><pre tabindex=0 style=background-color:#fff><code><span style=display:flex><span><span style=color:#00f>[Unit]</span> | ||
| 137 | </span></span><span style=display:flex><span>Description=<span style=color:#a31515>Caddy</span> | ||
| 138 | </span></span><span style=display:flex><span>Documentation=<span style=color:#a31515>https://caddyserver.com/docs/</span> | ||
| 139 | </span></span><span style=display:flex><span>After=<span style=color:#a31515>network.target network-online.target</span> | ||
| 140 | </span></span><span style=display:flex><span>Requires=<span style=color:#a31515>network-online.target</span> | ||
| 141 | </span></span><span style=display:flex><span> | ||
| 142 | </span></span><span style=display:flex><span><span style=color:#00f>[Service]</span> | ||
| 143 | </span></span><span style=display:flex><span>Type=<span style=color:#a31515>notify</span> | ||
| 144 | </span></span><span style=display:flex><span>User=<span style=color:#a31515>root</span> | ||
| 145 | </span></span><span style=display:flex><span>Group=<span style=color:#a31515>root</span> | ||
| 146 | </span></span><span style=display:flex><span>ExecStart=<span style=color:#a31515>/usr/bin/caddy run --environ --config /etc/caddy/Caddyfile --adapter caddyfile</span> | ||
| 147 | </span></span><span style=display:flex><span>ExecReload=<span style=color:#a31515>/usr/bin/caddy reload --config /etc/caddy/Caddyfile --force --adapter caddyfile</span> | ||
| 148 | </span></span><span style=display:flex><span>TimeoutStopSec=<span style=color:#a31515>5s</span> | ||
| 149 | </span></span><span style=display:flex><span>LimitNOFILE=<span style=color:#a31515>1048576</span> | ||
| 150 | </span></span><span style=display:flex><span>LimitNPROC=<span style=color:#a31515>512</span> | ||
| 151 | </span></span><span style=display:flex><span>PrivateTmp=<span style=color:#a31515>true</span> | ||
| 152 | </span></span><span style=display:flex><span>ProtectSystem=<span style=color:#a31515>full</span> | ||
| 153 | </span></span><span style=display:flex><span>AmbientCapabilities=<span style=color:#a31515>CAP_NET_ADMIN CAP_NET_BIND_SERVICE</span> | ||
| 154 | </span></span><span style=display:flex><span> | ||
| 155 | </span></span><span style=display:flex><span><span style=color:#00f>[Install]</span> | ||
| 156 | </span></span><span style=display:flex><span>WantedBy=<span style=color:#a31515>multi-user.target</span> | ||
| 157 | </span></span></code></pre><ul><li>You might need to reload systemd with <code>systemctl daemon-reload</code>.<li>Then I enabled the service with <code>systemctl enable caddy.service</code>.<li>And then I started the service with <code>systemctl start caddy.service</code>.</ul><p>This was about all that I needed to do to get it running. Now I can easily add | ||
| 158 | new subdomains and domains to the main configuration file and be done with | ||
| 159 | it. No manual Let's Encrypt shenanigans needed.</div></div></main><footer><hr><div><h3>Want to comment or have something to add?</h3>You can write me an email at | ||
| 160 | <a href=mailto:m@mitjafelicijan.com>m@mitjafelicijan.com</a> or catch up | ||
| 161 | with me | ||
| 162 | <a href=https://telegram.me/mitjafelicijan target=_blank>on Telegram</a>.</div><hr><p>This website does not track you. Content is made available under | ||
| 163 | the <a href=https://creativecommons.org/licenses/by/4.0/ target=_blank rel=noreferrer>CC BY 4.0 license</a> unless specified | ||
| 164 | otherwise. Blog feed is available as <a href=/index.xml target=_blank>RSS feed</a>.</footer><script src=https://cdn.usefathom.com/script.js data-site=XHQARKXP defer></script> \ No newline at end of file | ||
