Merge pull request #34 from freedomofpress/11ty

Make an initial attempt at an 11ty powered dangerzone.rocks

.gitignore

@@ -0,0 +1,2 @@
+/node_modules/
+/dist/

README.md

@@ -2,5 +2,18 @@
 
 This is a static website, currently hosted at https://dangerzone.rocks/
 
-You can edit it locally and test it in your browser without the use of a
-webserver or a static site generator.
+We use the static site generator [Eleventy](https://www.11ty.dev/) to build the site.
+
+To run Eleventy directly, you need Node.js (an LTS release or later). Run `npm install` to
+install the dependencies, then run `npm run serve` to serve the site on port 8080.
+
+In production, we use a containerized setup. You can also use it to serve the site:
+
+To test the deploy container:
+
+```sh
+docker build -t dzr -f deploy/Dockerfile .
+docker run --rm -p 127.0.0.1:8080:5080 dzr
+```
+
+This will also serve the site on port 8080.

deploy/Dockerfile

@@ -1,9 +1,18 @@
+# sha256 as of 2024-03-15
+FROM node:21.7.1-alpine3.19@sha256:4999fa1391e09259e71845d3d0e9ddfe5f51ab30253c8b490c633f710c7446a0 AS eleventy-build
+
+WORKDIR /usr/src/page
+COPY package.json package-lock.json eleventy.config.js ./
+COPY src ./src
+RUN npm ci
+RUN npm run build
+
 # sha256 as of 2023-07-05
 FROM nginx:mainline-alpine@sha256:2d4efe74ef541248b0a70838c557de04509d1115dec6bfc21ad0d66e41574a8a
 
 COPY deploy/nginx.conf /etc/nginx
 RUN mkdir -p /opt/nginx/run /opt/nginx/webroot/assets && chown -R nginx:nginx /opt/nginx
 
 USER nginx
-COPY --chown=nginx:nginx index.html about.html favicon.ico /opt/nginx/webroot/
-COPY --chown=nginx:nginx assets/ /opt/nginx/webroot/assets/
+COPY --from=eleventy-build --chown=nginx:nginx /usr/src/page/dist /opt/nginx/webroot/
+EXPOSE 5080

deploy/nginx.conf

@@ -28,6 +28,7 @@ http {
         add_header X-Frame-Options "DENY" always;
         add_header X-Content-Type-Options "nosniff" always;
         add_header X-XSS-Protection "1; mode=block" always;
-        add_header Referrer-Policy "same-origin" always;
+        add_header Referrer-Policy "strict-origin" always;
+        add_header Cross-Origin-Opener-Policy "same-origin" always;
     }
 }

eleventy.config.js

@@ -0,0 +1,16 @@
+module.exports = function(eleventyConfig) {
+    eleventyConfig.addPassthroughCopy("src/assets")
+    eleventyConfig.addPassthroughCopy("src/favicon.ico")
+
+    eleventyConfig.addCollection("posts", function(collection) {
+        return collection.getFilteredByGlob("src/posts/*.md");
+    })
+
+    return {
+        dir: {
+            input: "src",
+            output: "dist",
+            includes: '_layouts',
+        }
+    }
+}