This is a list of things that somebody should work on at some point. It’s like
an issue tracker, but simpler, less effective, and harder to keep track of.
Tasks that are well defined and can be done:
Replace h2o with caddy.
Add CSP and Referrer-Policy headers (but don’t break any websites!).
Old Gogs → new Gitea (there’s no easy migration path, though).
Tasks that are not well defined, or that want some validation:
Use a real static site generator, instead of an awkward python script?
Do we want the X-* headers?
Do we want to add the IRC channel anywhere on the website?
Decide what should be logged.
currently only crontab failures are logged
sudo would be noisy.
apk install / dependency tracking for our scripts, services, etc.
Would be nice to know why an arbitrary package is installed.