add security.txt

assets/security.txt

@@ -0,0 +1,3 @@
+Contact: https://ezrizhu.com/contact
+Expires: 2025-01-01T05:00:00.000Z
+Canonical: https://ezrizhu.com/security.txt

src/main.rs

@@ -13,6 +13,7 @@ mod feed;
 mod webring;
 mod pgp;
 mod ssh;
+mod security;
 
 async fn health() -> Html<String> {
     Html(String::from("OK"))
@@ -99,6 +100,7 @@ async fn main() {
         .route("/blog.atom", get(feed::blog_atom::get))
         .route("/.well-known/openpgpkey/hu/policy", get(pgp::policy))
         .route("/.well-known/openpgpkey/hu/15asjmkpucio5m8a7xznzcxqsqigumxt", get(pgp::pubkey))
+        .route("/.well-known/security.txt", get(security::securitytxt))
         .route("/ssh", get(ssh::sshpub))
         .fallback(site::not_found::not_found)
         .with_state(state);

src/security.rs

@@ -0,0 +1,12 @@
+use std::fs;
+use axum::{
+    http::HeaderMap,
+};
+
+pub async fn securitytxt() -> (HeaderMap, String) {
+    let mut resp_header = HeaderMap::new();
+    resp_header.insert("Content-Type", "text/plain".parse().unwrap());
+    resp_header.insert("Access-Control-Allow-Origin", "*".parse().unwrap());
+    let securitytxt = fs::read_to_string("assets/security.txt").unwrap();
+    (resp_header, securitytxt)
+}