packets.sh
Bilingual portfolio site with its own admin behind a password and TOTP, self-hosted.
Response headers from packets.shdefault values
200 OK
- strict-transport-security
- max-age=63072000; includeSubDomains
- content-security-policy
- default-src 'self'; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'none'; form-action 'self'; script-src 'self' 'sha256-…'
- x-frame-options
- DENY
- x-content-type-options
- nosniff
- referrer-policy
- strict-origin-when-cross-origin
- cross-origin-opener-policy
- same-origin
- permissions-policy
- camera=(), microphone=(), geolocation=()
This site is self-hosted on a Linux server behind nginx. Content lives in SQLite and is edited through an admin area protected by a password and TOTP. The language follows your browser, the theme your device.
The security headers (CSP, HSTS and others) are shown live, exactly as the server just sent them.