Stop tracking local-only files

.gitignore

@@ -1,4 +1,7 @@
 .gitignore
+.well-known/
+blocks/.csfdeny
+blocks/.env
 header24h.php
 nginx-logo.png
 pkglist.txt

blocks/.csfdeny

@@ -1,21 +0,0 @@
-###############################################################################
-# Copyright 2006-2018, Way to the Web Limited
-# URL: http://www.configserver.com
-# Email: sales@waytotheweb.com
-###############################################################################
-# The following IP addresses will be blocked in iptables
-# One IP address per line
-# CIDR addressing allowed with a quaded IP (e.g. 192.168.254.0/24)
-# Only list IP addresses, not domain names (they will be ignored)
-#
-# Note: If you add the text "do not delete" to the comments of an entry then
-# DENY_IP_LIMIT will ignore those entries and not remove them
-#
-# Advanced port+ip filtering allowed with the following format
-# tcp/udp|in/out|s/d=port,port,...|s/d=ip
-#
-# See readme.txt for more information regarding advanced port filtering
-#
-94.134.107.75 # lfd: (sshd-session) sshd-session brute‑force 94.134.107.75 (DE/Germany/i5E866B4B.versanet.de): 1 in the last 3600 secs - Fri Sep 26 08:28:02 2025
-2001:9e8:65ff:f600:bcfe:932d:c0a0:6735 # lfd: (sshd-session) sshd-session brute‑force 2001:9e8:65ff:f600:bcfe:932d:c0a0:6735 (Unknown): 1 in the last 3600 secs - Fri Sep 26 08:52:42 2025
-2001:9e8:65d8:1900:8cbd:20f5:640a:c57b # lfd: (sshd-session) sshd-session brute‑force 2001:9e8:65d8:1900:8cbd:20f5:640a:c57b (Unknown): 1 in the last 3600 secs - Sun Sep 28 17:45:13 2025

blocks/.env

@@ -1,6 +0,0 @@
-APP_ENV=prod
-DENY_FILE=.csfdeny
-ALLOW_IPS=149.56.184.115
-TRUST_PROXY=0
-TRUSTED_PROXIES=
-API_TOKEN=

signup/signup-handler.php

@@ -49,7 +49,7 @@ function forbidden_name(string $name): bool
         'git','gopher','hostmaster','imap','info','irc','is','isatap','it','localdomain','localhost','lounge',
         'mail','mailer-daemon','marketing','marketting','mis','news','nobody','noc','noreply','pop','pop3',
         'postmaster','retro','root','sales','security','smtp','ssladmin','ssladministrator','sslwebmaster',
-        'support','sysadmin','team','usenet','uucp','webmaster','wpad','www','znc',
+        'support','sysadmin','team','usenet','uucp','webmaster','wpad','www','znc','openpgpkey',
     ];
 
     $lists = [$bad];

wiki/source/guestbook.md

@@ -68,6 +68,7 @@ When you pass a `theme`, **only your CSS is loaded** (the default stylesheet is
 
   * Make sure the link is on `https://tilde.club/~<your_username>/...` (not just the domain root).
   * Check that browser extensions or privacy settings aren’t stripping referrers.
+    * On Firefox: Make sure in your about:config that `network.http.referer.XOriginTrimmingPolicy` is set to 0.
   * The error page will display what referrer was received and the expected pattern.
 
 ## Example links

wiki/source/wiki.md

@@ -118,7 +118,7 @@ of technological liberation...
   
   * [GitHub](https://github.com/tildeclub/site/)
     (requires JavaScript and latest browser to view)
-  * [Tildegit](https://tildegit.org/club/site/)
+  * [Tildeforge](https://tildeforge.dev/TildeClub/site)
     (read-only mirror,
     replicates from GitHub;
     do not need JavaScript to view)