<commit_before>server "freedns.afraid.org" {
#	alias ""

	listen on $fb1_IPv4 tls port https
	listen on $fb1_IPv6 tls port https

	hsts subdomains

	tls certificate "/etc/ssl/acme/freedns.afraid.org.fullchain.pem"
	tls key "/etc/ssl/acme/private/freedns.afraid.org.key"
	# (!) see usr/local/bin/get-ocsp.sh
	tls ocsp "/etc/ssl/acme/freedns.afraid.org.ocsp.resp.der"

	# Cipher Strength <https://h3artbl33d.nl/tech/httpd-tls.html>
	tls ciphers "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA"
	# Key Exchange
	tls dhe "auto"
	tls ecdhe "P-384"

	tcp nodelay
	connection { max requests 500, timeout 3600 }

	log { access "access.log", error "error.log" }

	block

	include "/etc/httpd.conf.location.mirror" # autoinstall mirror

	# Path-based cache busting: route all requests for "/css-20170620/style.css" to "/css/style.css"
	location match "^/css%-2%d%d%d%d%d%d%d/.+%..+" {
		root "/htdocs/freedns.afraid.org/css"
		root strip 1
		pass
	}
	location match "^/js%-2%d%d%d%d%d%d%d/.+%..+" {
		root "/htdocs/freedns.afraid.org/js"
		root strip 1
		pass<commit_msg>Disable DHE cipher suites, Update ECDHE curves<commit_after>server "freedns.afraid.org" {
#	alias ""

	listen on $fb1_IPv4 tls port https
	listen on $fb1_IPv6 tls port https

	hsts subdomains

	tls certificate "/etc/ssl/acme/freedns.afraid.org.fullchain.pem"
	tls key "/etc/ssl/acme/private/freedns.afraid.org.key"
	# (!) see usr/local/bin/get-ocsp.sh
	tls ocsp "/etc/ssl/acme/freedns.afraid.org.ocsp.resp.der"

	# Cipher Strength <https://h3artbl33d.nl/tech/httpd-tls.html>
	tls ciphers "ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA" # default: "HIGH:!aNULL"
	# Key Exchange <https://man.openbsd.org/tls_config_set_ecdhecurves>
	tls ecdhe "P-384,P-256,X25519" # default: "X25519,P-256,P-384"

	tcp nodelay
	connection { max requests 500, timeout 3600 }

	log { access "access.log", error "error.log" }

	block

	include "/etc/httpd.conf.location.mirror" # autoinstall mirror

	# Path-based cache busting: route all requests for "/css-20170620/style.css" to "/css/style.css"
	location match "^/css%-2%d%d%d%d%d%d%d/.+%..+" {
		root "/htdocs/freedns.afraid.org/css"
		root strip 1
		pass
	}
	location match "^/js%-2%d%d%d%d%d%d%d/.+%..+" {
		root "/htdocs/freedns.afraid.org/js"
		root strip 1
		pass
{'fraction_non_alphanumeric': 0.1606060606060606, 'fraction_numerical': 0.06553030303030304, 'mean_word_length': 4.078846153846154, 'pattern_counts': {'":': 0, '<': 6, '<?xml version=': 0, '>': 6, 'https://': 3, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '6944466', 'n_tokens_mistral': 1340, 'n_tokens_neox': 1145, 'n_words': 183}