feat: Implement rio's new rio.json

.gitignore

@@ -1,8 +1,8 @@
+# NixOS
 result
 .envrc
 .direnv/
 
-.jekyll-cache/
+# Build artifacts
-_site/
+static/css/index.css
-
+public/
-assets/css/index.css

static/CNAME

@@ -0,0 +1 @@
+moxxy.org

static/rio.json

@@ -0,0 +1,8 @@
+{
+    "CNAME": "moxxy.org",
+    "headers": {
+        "Content-Security-Policy": "default-src 'self'; script-src 'self'; script-src-elem 'self'; script-src-attr 'none'; style-src * 'self'; img-src 'self' data:; font-src 'self'; connect-src 'none'; media-src 'self'; object-src 'none'; prefetch-src 'none'; child-src 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; form-action 'none'; upgrade-insecure-requests; block-all-mixed-content; disown-opener; sandbox; base-uri https://moxxy.org; manifest-src 'none'",
+        "X-Frame-Options": "DENY",
+        "Referrer-Policy": "no-referrer, strict-origin-when-cross-origin"
+    }
+}