- posts are rendered from markdown with syntax highlighting for code
- safe links to other domains (noopener and _blank)
- bundled CSS, which look good (or as bad) on mobile
- a PWA (the service worker is the only JS run client-side)
- pre-populated links out to twitter (with a card) and mastodon with tags drawn from markdown metadata
- HTTPS using a letsencrypt cert and a one-liner in cron.daily to update it when close to expiry
- a smallish nginx config focussed on security to serve files
Much of the generator is just glue code around some good modules. Some important things like safe links were hacked together by me.
(if you're interested, https://qubyte.codes, but I need to post more often)