Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Free static websites with SSL for hackers

rolodato.com

Post reply on HN
Print view View original

21–30 of 36 posts

Re: Free static websites with SSL for hackers

#21

Post by yeukhon »

q3k wrote: post #19

Please don't teach people how to centralize the web around a service that isn't even supposed to be used for personal web pages [1]. [1] - "We offer Pages sites primarily as a showcase for personal and organizational projects." https://help.github.com/articles/github-corporate-terms-of-s...

You quoted it: "primarily", which means GitHub (in this case) does not prohibit users from using Page in the way you seem to disagree with. What you choose to do with Page, a blog, or a personal static website, is at the mercy and the discretion of the service provider. You just can't advertise products using Page.

You can call your project "my 365 days of kernel hacking series", put the code on Github, and then host a blog on GitHub with a mix of hacking blog posts and other non-hacking blog posts. That's acceptable.

Re: Free static websites with SSL for hackers

#22

Post by unethical_ban »

ReverseCold wrote: post #20
q3k wrote: post #19

Please don't teach people how to centralize the web around a service that isn't even supposed to be used for personal web pages [1]. [1] - "We offer Pages sites primarily as a showcase for personal and organizational projects." https://help.github.com/articles/github-corporate-terms-of-s...

He is explaining how to do this with Git Lab Pages, not Git Hub Pages (the ToS you linked to). Other than that, yes, GitLab pages exists for the same reason.

Furthermore, one can host Gitlab on their own. There is nothing wrong morally or otherwise with using a document revision service and build platform to push static sites.

Re: Free static websites with SSL for hackers

#23

Post by matthberg »

What I did was a more customized version of that, I made a .gitlab-ci.yml file which easily lets you run any scripts of your own to build, with the same end result. Using gulp I had it run in development mode by default with watchers and verbose outputs, yet in the ci file I called a production build that polished everything up. For the front end side, I used pug, sass and babel with a few other js things to make a templating system, which really helped me understand site structures.

Re: Free static websites with SSL for hackers

#24

Post by r3bl »

q3k wrote: post #19

Please don't teach people how to centralize the web around a service that isn't even supposed to be used for personal web pages [1]. [1] - "We offer Pages sites primarily as a showcase for personal and organizational projects." https://help.github.com/articles/github-corporate-terms-of-s...

If that was the case, there wouldn't be homepages (USER.github.io).

Projects reside on USER.github.io/PROJECT, so they assume you will create a homepage as well. If you're a user, that's your personal homepage.

Anyway, this is about GitLab.

Re: Free static websites with SSL for hackers

#25

Post by tacticus »

Hasz wrote: post #17
fenollp wrote: post #2

I use Netlify which has the same qualities and requires less setup/attention. Am not affiliated with them.

A second vote for Netlify, it's incredibly easy to use. I'm not monitoring uptime, but have had zero issues so far. I use it with Hugo, a static site generator. I believe Netlify has an easy SSL setup option, but it has been a while since I set it up. Before, I used NearlyFreeSpeech, which was very low cost but not nearly as streamlined.

netlify's ssl is one button plus a dns entry. it's pretty shiny

Re: Free static websites with SSL for hackers

#26

Post by tony101 »

prdonahue wrote: post #14
tony101 wrote: post #11

Earlier quoted context omitted.

End-to-end secure, but only against passive attacks. Cloudflare "Full SSL" (as opposed to "Strict SSL") does not verify the certificate presented by the origin server, so someone sitting between Cloudflare and your origin can still MITM the connection without detection. Strict SSL does not currently work with GitHub Pages, because "*.github.io" certs do not match custom domains. https://www.cloudflare.com/ssl/ https:…

We're working on making Strict mode work better in such situations. For example, if the origin server presents a certificate with a SAN for *.github.io and you have a CNAME to yourusername.github.io, this will (soon) validate as Strict.

That's great news! I've been hoping Cloudflare would allow customized cert validation (i.e. the user specifies a domain name to verify against, in the control panel). At least the improvement you mention will increase compatibility with GitHub Pages and others.

Re: Free static websites with SSL for hackers

#28

Post by jlgaddis »

superasn wrote: post #18

For static sites hosting on AWS S3 is super cheap, plus with Cloudfront CDN in front you can be sure your site is being delivered to the user by a server near him. It's not 100% free but still very cheap for static websites[1] [1] https://medium.com/@sbuckpesch/setup-aws-s3-static-website-h...

At some point, I'm going to convert my web site (a neglected blog) to a static site. When I do, I'll likely go the S3 + Cloudfront route and retire the aging physical server it's running on.

I've looked into this a couple of times in the past and that's the method I kept coming up with. I really want to do it but I've had trouble motivating myself to redo the hundreds of blog posts currently in WordPress.

Re: Free static websites with SSL for hackers

#29

Post by [deleted] »

prdonahue wrote: post #14
tony101 wrote: post #11

Earlier quoted context omitted.

End-to-end secure, but only against passive attacks. Cloudflare "Full SSL" (as opposed to "Strict SSL") does not verify the certificate presented by the origin server, so someone sitting between Cloudflare and your origin can still MITM the connection without detection. Strict SSL does not currently work with GitHub Pages, because "*.github.io" certs do not match custom domains. https://www.cloudflare.com/ssl/ https:…

We're working on making Strict mode work better in such situations. For example, if the origin server presents a certificate with a SAN for *.github.io and you have a CNAME to yourusername.github.io, this will (soon) validate as Strict.

[deleted]

Re: Free static websites with SSL for hackers

#30

Post by neya »

As another commenter has mentioned, Netlify is fantastic. It takes care of everything and migration is painless. And the best of all, it's free~

This year, one of my goals is to migrate all my Wordpress blogs to Jekyll and host them on Netlify. I'm almost done with 2/3rds of them and couldn't be happier. Highly recommended.

Post reply on HN