feat: Implement rio's new rio.json

This reverts commit e06e562568.

.gitignore

@@ -5,4 +5,7 @@ result
 public/
 
 # Generated using tailwindcss
-static/css/index.css
+static/css/index.css
+
+# Zola build output
+public/

.woodpecker.yml

@@ -7,10 +7,10 @@ steps:
       - npx tailwindcss -i input.css -o static/css/index.css --minify
       - zola build
   deploy:
-    image: git.polynom.me/papatutuwawa/woodpecker-ssg-deploy@sha256:c7e2e8ad5d096ca6a628ffbbfa1026dce21784305f6069985d830c4167abcbda
-    secrets: [ git_push_token ]
+    image: git.polynom.me/papatutuwawa/woodpecker-ssg-deploy@sha256:9cfec13eb8ab1b8920c2f1f00f0258a7bfd159fe4e14e0985328086392c0da34
+    secrets: [ ssh_key ]
     settings:
       email: "ci@polynom.me"
       name: "polynom.me CI system"
-      token_env: "GIT_PUSH_TOKEN"
+      token_env: "SSH_KEY"
       output: "public"

static/CNAME

@@ -0,0 +1 @@
+polynom.me

static/rio.json

@@ -0,0 +1,8 @@
+{
+    "CNAME": "polynom.me",
+    "headers": {
+        "Content-Security-Policy": "default-src 'self'; script-src 'self'; script-src-elem 'self'; script-src-attr 'none'; style-src * 'self'; img-src 'self' data:; font-src 'self'; connect-src 'none'; media-src 'self'; object-src 'none'; prefetch-src 'none'; child-src 'none'; frame-src 'none'; worker-src 'none'; frame-ancestors 'none'; form-action 'none'; upgrade-insecure-requests; block-all-mixed-content; disown-opener; sandbox; base-uri https://polynom.me; manifest-src 'none'",
+        "X-Frame-Options": "DENY",
+        "Referrer-Policy": "no-referrer, strict-origin-when-cross-origin"
+    }
+}