{"action":"created","issue":{"url":"https://api.github.com/repos/purescript/pursuit/issues/101","labels_url":"https://api.github.com/repos/purescript/pursuit/issues/101/labels{/name}","comments_url":"https://api.github.com/repos/purescript/pursuit/issues/101/comments","events_url":"https://api.github.com/repos/purescript/pursuit/issues/101/events","html_url":"https://github.com/purescript/pursuit/issues/101","id":93660648,"number":101,"title":"Last tasks for deployment","user":{"login":"hdgarrood","id":1270186,"avatar_url":"https://avatars.githubusercontent.com/u/1270186?v=3","gravatar_id":"","url":"https://api.github.com/users/hdgarrood","html_url":"https://github.com/hdgarrood","followers_url":"https://api.github.com/users/hdgarrood/followers","following_url":"https://api.github.com/users/hdgarrood/following{/other_user}","gists_url":"https://api.github.com/users/hdgarrood/gists{/gist_id}","starred_url":"https://api.github.com/users/hdgarrood/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hdgarrood/subscriptions","organizations_url":"https://api.github.com/users/hdgarrood/orgs","repos_url":"https://api.github.com/users/hdgarrood/repos","events_url":"https://api.github.com/users/hdgarrood/events{/privacy}","received_events_url":"https://api.github.com/users/hdgarrood/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-07-08T00:32:54Z","updated_at":"2015-07-08T03:02:52Z","closed_at":null,"body":"* [ ] Set up Travis / GH releases, in order to make deployment easier. I guess we would bump the version in the cabal file and push a tag to GitHub every time we wanted to deploy, Travis would build it, and upload the result to a GitHub release, and then it would be uploaded to the server manually by @paf31?\r\n* [ ] Release version 0.7.1 of the compiler, which will include the fix in purescript/purescript#1221 (transitive dependencies were not being included in `psc-publish` output, resulting in links not being rendered).\r\n* [ ] Delete all the data on `new-pursuit` and regenerate it using `psc-publish` 0.7.1, for the same reason.\r\n* [ ] Perhaps we should also configure the production deployment to reject packages created by `psc-publish` 0.7.0?\r\n* [ ] Configure `Content-Security-Policy` headers on nginx. We get CSS and fonts from google, and there's also Google Analytics which you can turn on by putting a code into the environment variable `PURSUIT_GOOGLE_ANALYTICS_CODE`. Other than that we can block pretty much everything. I think this would work (newlines added for readability):\r\n\r\n```\r\nContent-Security-Policy:\r\ndefault-src 'none';\r\nscript-src 'self' google-analytics.com;\r\nstyle-src 'self' fonts.googleapis.com;\r\nfont-src fonts.gstatic.com;\r\nimg-src *;\r\nconnect-src 'self'; # for the version selector\r\nplugin-types 'none';\r\nbase-uri 'none';\r\n```"},"comment":{"url":"https://api.github.com/repos/purescript/pursuit/issues/comments/119406780","html_url":"https://github.com/purescript/pursuit/issues/101#issuecomment-119406780","issue_url":"https://api.github.com/repos/purescript/pursuit/issues/101","id":119406780,"user":{"login":"hdgarrood","id":1270186,"avatar_url":"https://avatars.githubusercontent.com/u/1270186?v=3","gravatar_id":"","url":"https://api.github.com/users/hdgarrood","html_url":"https://github.com/hdgarrood","followers_url":"https://api.github.com/users/hdgarrood/followers","following_url":"https://api.github.com/users/hdgarrood/following{/other_user}","gists_url":"https://api.github.com/users/hdgarrood/gists{/gist_id}","starred_url":"https://api.github.com/users/hdgarrood/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hdgarrood/subscriptions","organizations_url":"https://api.github.com/users/hdgarrood/orgs","repos_url":"https://api.github.com/users/hdgarrood/repos","events_url":"https://api.github.com/users/hdgarrood/events{/privacy}","received_events_url":"https://api.github.com/users/hdgarrood/received_events","type":"User","site_admin":false},"created_at":"2015-07-08T03:02:52Z","updated_at":"2015-07-08T03:02:52Z","body":"That CSP header is almost what we want; see the one I committed instead."}}