emi
92e74c585a
All checks were successful
Sync infra to hosts / sync-beta (push) Successful in 13s
Sync infra to hosts / sync-prod (push) Successful in 12s
secrets-guard / encrypted (push) Successful in 7s
shell-lint / shellcheck (push) Successful in 8s
Build + push frontend image (Forgejo registry) / build-push (push) Successful in 53s
Deploy frontend to beta VPS / deploy (push) Successful in 1m16s
secrets-guard / encrypted (pull_request) Successful in 5s
shell-lint / shellcheck (pull_request) Successful in 6s
Ports frontend/ (Jinja2/FastAPI, ~1180 LOC) to Go with html/template. No climate math, no DB, no auth -- every route fetches from the backend's /content/* API. Verified with a golden-HTML diff, not just unit tests: both the Python original and the Go rewrite were run against the same committed fixtures and every route compared byte-for-byte, confirmed programmatically. That process caught defects unit tests alone missed, since map[string]any has no compile-time field check: - Render-context keys were snake_case throughout while the templates read PascalCase fields. A missing map key doesn't error, it silently renders empty -- title, meta description, canonical URL, OpenGraph tags, and the homepage's entire ranked list were blank on every page despite every route returning 200. Fixed by renaming every key to match each template's own documented field contract, and passing API structs straight through wherever their fields already matched (removes a whole layer of future drift risk). - Three pages 500'd: ToolHref needed a composed href, not a bare "lat,lon" fragment; the records table needed the raw API struct. - JSON-LD was double-encoded: <script type="application/ld+json"> is JAVASCRIPT context to html/template's escaper regardless of the script's type attribute, so template.HTML gets re-escaped as a quoted JS string. Needed template.JS. The glossary term page's JSON-LD was never built at all -- added. - html/template silently strips literal HTML and JS comments from parsed output (verified in isolation) -- both need a FuncMap function returning template.HTML/template.JS to survive. Packaging: 187MB -> 22.6MB. Two defects caught before reaching a host: the Swarm stack's entrypoint override with no explicit command drops the image's CMD entirely (every deploy would have exited 127), and COPY --chown by name fails under the classic Docker builder on Alpine. Both fixed. go build/vet/test -race clean; docker build passes its embedded test step under both BuildKit and the classic builder; shellcheck 0 findings.
31 lines
No EOL
1.9 KiB
Cheetah
31 lines
No EOL
1.9 KiB
Cheetah
{{/* Ported from templates/privacy.html.j2. Extra data: .Breadcrumb. */}}{{template "base_head_start" .}}{{template "base_head_end" .}}{{template "base_body_start" .}}{{template "breadcrumb" .}}<article class="climate-page">
|
|
<h1>Privacy</h1>
|
|
<p class="lede">Thermograph is free, has no ads, and needs no account. It is built so that
|
|
there is very little about you to collect in the first place.</p>
|
|
|
|
<h2>Your location</h2>
|
|
<p>Thermograph never looks up your location from your IP address. The only way the site
|
|
learns where you are is if you press <b>Use my location</b>, which asks your browser for
|
|
permission. You can decline, and picking a place on the map works just as well.</p>
|
|
<p>Whichever way you choose a place, the coordinates are sent to the server only as part of
|
|
the ordinary request for that grid square's climate data, and are not logged beyond the
|
|
normal web-server request handling every site does. The place you picked is remembered in
|
|
your own browser's local storage, not on the server, so clearing your browser data
|
|
forgets it.</p>
|
|
|
|
<h2>Analytics</h2>
|
|
<p>There is no analytics library, no cookies for tracking, and no per-visitor identifier.
|
|
The server keeps simple aggregate counts (how many people opened a page or tapped a
|
|
button, and which site referred them) with nothing tying any of it to an individual.</p>
|
|
|
|
<h2>Email</h2>
|
|
<p>If you sign up for the monthly digest, your address is used for that digest and nothing
|
|
else. It is never sold or shared, and every message can unsubscribe you.</p>
|
|
|
|
<h2>Accounts</h2>
|
|
<p>An account is optional and only exists to hold weather alerts you have asked for. It
|
|
stores your email address and the places you are watching.</p>
|
|
|
|
<p class="muted">Questions: see <a href="{{.Base}}/about">About & methodology</a>.</p>
|
|
</article>
|
|
{{template "base_body_end" .}}{{template "base_scripts_default" .}}{{template "base_tail" .}} |