doc/CHANGELOG: move to separate file, add v1.5.0 changelog

CHANGELOG.md

@@ -0,0 +1,62 @@
+# Changelog
+
+2026-03-03 v1.5.0
+- Reduce Gitea refresh interval to 60m
+- Support SVG images
+- Support embedded images in markdown doc
+- Add `CHANGELOG.md` support
+- Add Content-Security-Policy
+- Change image URLs to be clearer and simpler
+- Fix broken image links if proxy is used
+- Fix pixellated image scaling in Chrome browser
+- Use Go1.26, use new net/http router 
+
+2025-06-01 v1.4.2
+- Proxy images from Gitea, for servers using `REQUIRE_SIGNIN_VIEW=expensive`
+- Always use fallback markdown renderer
+- Fix missing support for markdown tables in fallback renderer
+- Fix very wide code blocks overflowing page width
+
+2024-03-19 v1.4.1
+- Add cooldown for failed markdown API calls
+- Fix missing extra html elements when using fallback markdown renderer
+
+2024-03-19 v1.4.0
+- Support using application token for Gitea API
+- Add fallback to internal markdown renderer if Gitea's API is unavailable
+- Add fallback to Gitea page redirect if there are any errors building repo page
+- Embed static web assets in binary (requires Go 1.16+)
+
+2022-12-31 v1.3.1
+- Fix missing images on homepage
+- Fix an issue with wrong mtime comparisons for updated repositories
+
+2022-12-31 v1.3.0
+- Add `OverrideOrder` configuration option to insert repos at specific positions
+- Cache target image URLs to improve homepage load performance
+
+2021-04-12 v1.2.1
+- Exclude 'build:success' tag from article-only repositories, and re-host the image locally
+- Also search root repo directory for images
+- Enhance mobile viewport and table styling
+
+2020-11-19 v1.2.0
+- Cache homepage repositories, sync changes in the background
+- Consider the updated time to be the most recent commit, not the Gitea repository metadata update field
+- Add extra logging to startup
+
+2020-11-08 v1.1.1
+- Fix an issue with newer versions of Gitea that paginate repoistory list responses
+- Fix an issue with blocking semaphores for a cancelled network request
+
+2020-05-24 v1.1.0
+- Support limiting the number of concurrent API requests to Gitea
+- Display total number of projects
+- Fix cosmetic issues with page background image, page height, and margins around thumbnails
+
+2020-05-24 v1.0.1
+- Remove image dependency from static files
+- Fix a cosmetic issue with `h2`/`h3` margins
+
+2020-05-05 v1.0.0
+- Initial release

Dockerfile

@@ -1,6 +1,6 @@
 # Dockerfile for production Teafolio deployments
 
-FROM golang:1.22-alpine AS builder
+FROM golang:1.26-alpine AS builder
 
 WORKDIR /app
 COPY . .

README.md

@@ -28,55 +28,3 @@ By default, Dokku will proxy HTTP on port 5000.
 dokku apps:create teafolio
 dokku storage:mount teafolio /srv/teafolio-dokku/config.toml:/app/config.toml
 ```
-
-## CHANGELOG
-
-2025-06-01 v1.4.2
-- Proxy images from Gitea, for servers using `REQUIRE_SIGNIN_VIEW=expensive`
-- Always use fallback markdown renderer
-- Fix missing support for markdown tables in fallback renderer
-- Fix very wide code blocks overflowing page width
-
-2024-03-19 v1.4.1
-- Add cooldown for failed markdown API calls
-- Fix missing extra html elements when using fallback markdown renderer
-
-2024-03-19 v1.4.0
-- Support using application token for Gitea API
-- Add fallback to internal markdown renderer if Gitea's API is unavailable
-- Add fallback to Gitea page redirect if there are any errors building repo page
-- Embed static web assets in binary (requires Go 1.16+)
-
-2022-12-31 v1.3.1
-- Fix missing images on homepage
-- Fix an issue with wrong mtime comparisons for updated repositories
-
-2022-12-31 v1.3.0
-- Add `OverrideOrder` configuration option to insert repos at specific positions
-- Cache target image URLs to improve homepage load performance
-
-2021-04-12 v1.2.1
-- Exclude 'build:success' tag from article-only repositories, and re-host the image locally
-- Also search root repo directory for images
-- Enhance mobile viewport and table styling
-
-2020-11-19 v1.2.0
-- Cache homepage repositories, sync changes in the background
-- Consider the updated time to be the most recent commit, not the Gitea repository metadata update field
-- Add extra logging to startup
-
-2020-11-08 v1.1.1
-- Fix an issue with newer versions of Gitea that paginate repoistory list responses
-- Fix an issue with blocking semaphores for a cancelled network request
-
-2020-05-24 v1.1.0
-- Support limiting the number of concurrent API requests to Gitea
-- Display total number of projects
-- Fix cosmetic issues with page background image, page height, and margins around thumbnails
-
-2020-05-24 v1.0.1
-- Remove image dependency from static files
-- Fix a cosmetic issue with `h2`/`h3` margins
-
-2020-05-05 v1.0.0
-- Initial release

gitea/types.go

@@ -35,7 +35,10 @@ type ReaddirEntry struct {
 }
 
 func (rde ReaddirEntry) isImage() bool {
-	return strings.HasSuffix(rde.Name, `.png`) || strings.HasSuffix(rde.Name, `.jpg`) || strings.HasSuffix(rde.Name, `.jpeg`)
+	return strings.HasSuffix(rde.Name, `.png`) ||
+		strings.HasSuffix(rde.Name, `.jpg`) ||
+		strings.HasSuffix(rde.Name, `.jpeg`) ||
+		strings.HasSuffix(rde.Name, `.svg`)
 }
 
 type MarkdownRequest struct {

go.mod

@@ -1,6 +1,6 @@
 module teafolio
 
-go 1.19
+go 1.22
 
 require (
 	github.com/BurntSushi/toml v0.3.1

main.go

@@ -5,7 +5,6 @@ import (
 	"flag"
 	"log"
 	"net/http"
-	"regexp"
 	"sync"
 	"teafolio/gitea"
 
@@ -32,10 +31,6 @@ type Config struct {
 type Application struct {
 	cfg Config
 
-	rxRepoPage   *regexp.Regexp
-	rxRepoImage  *regexp.Regexp
-	rxRepoImage2 *regexp.Regexp
-
 	gitea *gitea.APIClient
 	md    goldmark.Markdown
 
@@ -47,10 +42,6 @@ type Application struct {
 
 func main() {
 	app := Application{
-		rxRepoPage:   regexp.MustCompile(`^/([^/]+)/?$`),
-		rxRepoImage:  regexp.MustCompile(`^/:banner/([^/]+)/?$`),
-		rxRepoImage2: regexp.MustCompile(`^/:repo-img/([0-9]+)/([^/]+)/?$`),
-
 		md: goldmark.New(
 			goldmark.WithExtensions(extension.GFM), // required for table rendering support
 		),
@@ -67,9 +58,11 @@ func main() {
 	// Create Gitea API client
 	app.gitea = gitea.NewAPIClient(app.cfg.Gitea.URL, app.cfg.Gitea.Org, app.cfg.Gitea.Token, app.cfg.Gitea.MaxConnections)
 
+	mux := app.createRouter()
+
 	// Sync worker
 	go app.syncWorker(context.Background())
 
 	log.Printf("Starting web server on [%s]...", app.cfg.BindTo)
-	log.Fatal(http.ListenAndServe(app.cfg.BindTo, &app))
+	log.Fatal(http.ListenAndServe(app.cfg.BindTo, mux))
 }

page_changelog.go

@@ -0,0 +1,45 @@
+package main
+
+import (
+	"fmt"
+	"html"
+	"log"
+	"net/http"
+	"net/url"
+)
+
+const (
+	ChangelogFilename = `CHANGELOG.md`
+)
+
+func (this *Application) ChangelogPage(w http.ResponseWriter, r *http.Request, repoName string) {
+	ctx := r.Context()
+	repoURL := this.repoURL(repoName)
+
+	changelog, err := this.gitea.RepoFile(ctx, repoName, ChangelogFilename)
+	if err != nil {
+		log.Printf("%s %s: loading changelog %q: %s", r.Method, r.URL.Path, ChangelogFilename, err)
+		http.Redirect(w, r, repoURL, http.StatusTemporaryRedirect)
+		return
+	}
+
+	// Convert to markdown
+
+	changelogHtml, _, err := this.renderMarkdown(repoName, changelog)
+	if err != nil {
+		log.Printf("%s %s: %s", r.Method, r.URL.Path, fmt.Errorf("rendering markdown: %w", err))
+		http.Redirect(w, r, repoURL, http.StatusTemporaryRedirect)
+		return
+	}
+
+	// Ready for template
+
+	this.Templatepage(w, r, repoName, "", func() {
+		fmt.Fprint(w, `<div class="projinfo"><div class="projbody">`)
+		fmt.Fprint(w, `<h2><a href="`+html.EscapeString(`/`+url.PathEscape(repoName))+`">`+html.EscapeString(repoName)+`</a> &gt; Changelog</h2>`)
+		fmt.Fprint(w, changelogHtml)
+		fmt.Fprint(w, `</div>`)
+		fmt.Fprint(w, `<div style="clear:both;"></div>`)
+		fmt.Fprint(w, `</div>`) // projbody
+	})
+}

page_home.go

@@ -66,7 +66,7 @@ func (this *Application) Homepage(w http.ResponseWriter, r *http.Request) {
 				data-sort-mt="`+fmt.Sprintf("%d", repo.NewestCommit.Unix())+`"
 			>
 				<td>
-					<a href="`+pageHref+`"><img class="homeimage" loading="lazy" src="`+html.EscapeString(`/:banner/`+url.PathEscape(repo.Name))+`"></div></a>
+					<a href="`+pageHref+`"><img class="homeimage" loading="lazy" src="`+html.EscapeString(`/`+url.PathEscape(repo.Name)+`/banner`)+`"></div></a>
 				</td>
 				<td>
 					<strong>`+html.EscapeString(repo.Name)+`</strong>`+html.EscapeString(normalisedDesc)+`

page_imageredir.go

@@ -1,7 +1,9 @@
 package main
 
 import (
+	"bytes"
 	"net/http"
+	"strings"
 )
 
 func (this *Application) Bannerpage(w http.ResponseWriter, r *http.Request, repoName string, imageIdx int) {
@@ -11,15 +13,13 @@ func (this *Application) Bannerpage(w http.ResponseWriter, r *http.Request, repo
 
 	ridx, ok := this.reposCacheByName[repoName]
 	if !ok {
-		w.Header().Set(`Location`, `/static/no_image.png`)
-		w.WriteHeader(301)
+		http.Redirect(w, r, `/static/no_image.png`, 301)
 		return
 	}
 
 	images := this.reposCache[ridx].Images
 	if imageIdx >= len(images) {
-		w.Header().Set(`Location`, `/static/no_image.png`)
-		w.WriteHeader(301)
+		http.Redirect(w, r, `/static/no_image.png`, 301)
 		return
 	}
 
@@ -32,5 +32,22 @@ func (this *Application) Bannerpage(w http.ResponseWriter, r *http.Request, repo
 		return
 	}
 
+	// Go will automatically add a Content-Type header, but, sniff it ourselves
+	// to ensure it's really an image and not arbitrary data
+	// This is important for SVG that might embed JS
+
+	contentType := http.DetectContentType(imgData)
+	if strings.HasPrefix(contentType, `text/xml`) && bytes.Contains(imgData, []byte(`<svg`)) {
+		contentType = `image/svg+xml`
+	}
+
+	if !strings.HasPrefix(contentType, `image/`) {
+		http.Error(w, "not an image", 500)
+		return
+	}
+
+	w.Header().Set(`Content-Type`, contentType)
+	w.Header().Set(`Content-Disposition`, `inline`)
+	w.WriteHeader(200)
 	w.Write(imgData)
 }

page_repository.go

@@ -9,12 +9,11 @@ import (
 	"net/url"
 	"strconv"
 	"strings"
-	"teafolio/gitea"
 )
 
 func (this *Application) Repopage(w http.ResponseWriter, r *http.Request, repoName string) {
 	ctx := r.Context()
-	repoURL := this.cfg.Gitea.URL + url.PathEscape(this.cfg.Gitea.Org) + `/` + url.PathEscape(repoName)
+	repoURL := this.repoURL(repoName)
 	extraHead := ""
 
 	readme, err := this.gitea.RepoFile(ctx, repoName, `README.md`)
@@ -24,32 +23,15 @@ func (this *Application) Repopage(w http.ResponseWriter, r *http.Request, repoNa
 		return
 	}
 
-	lines := strings.Split(string(readme), "\n")
-
-	// Check if this repo has the 'article' tag
-	hasArticleTag := false
-	this.reposMut.RLock()
-	for _, rr := range this.reposCache {
-		if rr.Name != repoName {
-			continue
-		}
-		for _, topic := range rr.Topics {
-			if topic == "article" {
-				hasArticleTag = true
-				break
-			}
-		}
-	}
-	this.reposMut.RUnlock()
-
+	// Inject more badges to 3rd line; or, create badges on 3rd line if there are none already
 	// We add some extra badges based on special text entries
 	extraBadgesMd := ``
-	if !hasArticleTag {
-		extraBadgesMd += ` %%REPLACEME__BADGE%%`
+	if !this.repoHasTag(repoName, "article") {
+		extraBadgesMd += ` ![](/static/build_success_brightgreen.svg)`
 	}
 	extraBadgesMd += ` [![](https://img.shields.io/badge/vcs-git-green?logo=git)](` + repoURL + `)`
 
-	// Inject more badges to 3rd line; or, create badges on 3rd line if there are none already
+	lines := strings.Split(string(readme), "\n")
 	if len(lines) >= 3 && strings.Contains(lines[2], `shields.io`) {
 		lines[2] += ` ` + extraBadgesMd
 	} else {
@@ -57,9 +39,20 @@ func (this *Application) Repopage(w http.ResponseWriter, r *http.Request, repoNa
 		lines = append([]string{lines[0], lines[1], extraBadgesMd, ""}, lines[2:]...)
 	}
 
-	buff := bytes.Buffer{}
-	err = this.md.Convert([]byte(strings.Join(lines, "\n")), &buff)
+	if _, err := this.gitea.RepoFile(ctx, repoName, ChangelogFilename); err == nil {
+		// Changelog exists
+		// Add link at footer
+		lines = append(lines,
+			"",
+			"## Changelog",
+			"",
+			`[➡️ View changelog](/`+url.PathEscape(repoName)+`/changelog)`,
+		)
+	}
 
+	// Convert to markdown
+
+	readmeHtml, images, err := this.renderMarkdown(repoName, []byte(strings.Join(lines, "\n")))
 	if err != nil {
 		// Built-in markdown renderer didn't work either
 		log.Printf("%s %s: %s", r.Method, r.URL.Path, fmt.Errorf("rendering markdown: %w", err))
@@ -67,18 +60,6 @@ func (this *Application) Repopage(w http.ResponseWriter, r *http.Request, repoNa
 		return
 	}
 
-	readmeHtml := buff.Bytes()
-	readmeHtml = []byte(strings.Replace(string(readmeHtml), `%%REPLACEME__BADGE%%`, `<img src="/static/build_success_brightgreen.svg" style="width:90px;height:20px;">`, 1))
-
-	// Use cached image list, since the idx numbers need to match the :repo-img/##
-	// which only uses a cached lookup
-	var images []gitea.ReaddirEntry
-	this.reposMut.RLock()
-	if cacheIdx, ok := this.reposCacheByName[repoName]; ok {
-		images = this.reposCache[cacheIdx].Images
-	}
-	this.reposMut.RUnlock()
-
 	// If the Git repository contains a top-level go.mod file, allow vanity imports
 	if goMod, err := this.gitea.RepoFile(ctx, repoName, `go.mod`); err == nil {
 
@@ -90,10 +71,6 @@ func (this *Application) Repopage(w http.ResponseWriter, r *http.Request, repoNa
 		}
 	}
 
-	// De-escalate all headers in rendered markdown to match our style
-	repl := strings.NewReplacer(`<h1`, `<h2`, `<h2`, `<h3`, `<h3`, `<h4`,
-		`</h1>`, `</h2>`, `</h2>`, `</h3>`, `</h3>`, `</h4>`)
-
 	// Ready for template
 
 	this.Templatepage(w, r, repoName, extraHead, func() {
@@ -104,17 +81,17 @@ func (this *Application) Repopage(w http.ResponseWriter, r *http.Request, repoNa
 		}
 
 		fmt.Fprint(w, `<div class="projinfo"><div class="`+projBodyclass+`">`)
-		repl.WriteString(w, string(readmeHtml))
+		fmt.Fprint(w, readmeHtml)
 		fmt.Fprint(w, `</div>`)
 
 		if len(images) > 0 {
 			fmt.Fprint(w, `<div class="projimg">`)
-			for imgIdx, img := range images {
-				// Direct link
-				// fmt.Fprint(w, `<a href="`+html.EscapeString(img.RawURL)+`"><img alt="" class="thumbimage" src="`+html.EscapeString(img.RawURL)+`" /></a>`)
+			for imgIdx, _ := range images {
 
-				// Proxied image
-				fmt.Fprint(w, `<a href="`+html.EscapeString(img.RawURL)+`"><img alt="" class="thumbimage" src="/:repo-img/`+strconv.Itoa(imgIdx)+`/`+html.EscapeString(repoName)+`" /></a>`)
+				// imageUrl := img.RawURL // Direct link
+				imageUrl := `/` + url.PathEscape(repoName) + `/img/` + strconv.Itoa(imgIdx) // Proxied image
+
+				fmt.Fprint(w, `<a href="`+html.EscapeString(imageUrl)+`"><img alt="" class="thumbimage" src="`+html.EscapeString(imageUrl)+`" /></a>`)
 			}
 			fmt.Fprint(w, `</div>`)
 		}

page_template.go

@@ -0,0 +1,45 @@
+package main
+
+import (
+	"fmt"
+	"html"
+	"net/http"
+)
+
+func (this *Application) Templatepage(w http.ResponseWriter, r *http.Request, pageDesc, extraHead string, cb func()) {
+
+	pageTitle := this.cfg.Template.AppName
+	if pageDesc != "" {
+		pageTitle = pageDesc + ` | ` + pageTitle
+	}
+
+	w.Header().Set(`Content-Type`, `text/html; charset=UTF-8`)
+	w.WriteHeader(200)
+	fmt.Fprint(w, `<!DOCTYPE html>
+<html lang="en">
+	<head>
+		<meta http-equiv="X-UA-Compatible" content="IE=edge">
+		<meta charset="UTF-8">
+		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+		<meta http-equiv="Content-Security-Policy" content="default-src 'self' ; style-src 'unsafe-inline' 'self' ; img-src data: * ;">
+		
+		<meta name="viewport" content="width=device-width, initial-scale=1">
+		<title>`+html.EscapeString(pageTitle)+`</title>
+		`+extraHead+`
+		<link rel="shortcut icon" href="/static/logo.png" type="image/png">
+		<link rel="apple-touch-icon" href="/static/logo.png" type="image/png">
+		<link type="text/css" rel="stylesheet" href="/static/style.css">
+	</head>
+	<body>
+		<div id="container">
+			<div id="content">
+				<h1><a href="/"><div id="logo"></div>`+html.EscapeString(this.cfg.Template.AppName)+`</a></h1>
+	`)
+	cb()
+	fmt.Fprint(w, `
+	</body>
+	<script type="text/javascript" src="/static/site.js"></script>
+</html>
+`)
+
+}

page_util.go

@@ -5,42 +5,69 @@ import (
 	"html"
 	"log"
 	"net/http"
+	"net/url"
+	"slices"
+	"strconv"
+	"strings"
+
+	"teafolio/gitea"
 )
 
-func (this *Application) Templatepage(w http.ResponseWriter, r *http.Request, pageDesc, extraHead string, cb func()) {
+func (this *Application) renderMarkdown(repoName string, markdown []byte) (string, []gitea.ReaddirEntry, error) {
 
-	pageTitle := this.cfg.Template.AppName
-	if pageDesc != "" {
-		pageTitle = pageDesc + ` | ` + pageTitle
+	rendered := strings.Builder{}
+	err := this.md.Convert(markdown, &rendered)
+	if err != nil {
+		return "", nil, err
 	}
 
-	w.Header().Set(`Content-Type`, `text/html; charset=UTF-8`)
-	w.WriteHeader(200)
-	fmt.Fprint(w, `<!DOCTYPE html>
-<html lang="en">
-	<head>
-		<meta http-equiv="X-UA-Compatible" content="IE=edge">
-		<meta charset="UTF-8">
-		<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
-		<meta name="viewport" content="width=device-width, initial-scale=1">
-		<title>`+html.EscapeString(pageTitle)+`</title>
-		`+extraHead+`
-		<link rel="shortcut icon" href="/static/logo.png" type="image/png">
-		<link rel="apple-touch-icon" href="/static/logo.png" type="image/png">
-		<link type="text/css" rel="stylesheet" href="/static/style.css">
-	</head>
-	<body>
-		<div id="container">
-			<div id="content">
-				<h1><a href="/"><div id="logo"></div>`+html.EscapeString(this.cfg.Template.AppName)+`</a></h1>
-	`)
-	cb()
-	fmt.Fprint(w, `
-	</body>
-	<script type="text/javascript" src="/static/site.js"></script>
-</html>
-`)
+	readmeHtml := rendered.String()
 
+	// Replace image embed links
+	var images []gitea.ReaddirEntry
+	this.reposMut.RLock()
+	if cacheIdx, ok := this.reposCacheByName[repoName]; ok {
+		images = this.reposCache[cacheIdx].Images
+	}
+	this.reposMut.RUnlock()
+
+	// Replace simple image embeds with our version
+	for imgIdx, img := range images {
+		readmeHtml = strings.ReplaceAll(
+			readmeHtml,
+			`<img src="`+html.EscapeString(img.Path)+`"`,
+			`<img src="`+html.EscapeString(`/`+url.PathEscape(repoName)+`/img/`+strconv.Itoa(imgIdx))+`"`, // Proxied image
+		)
+	}
+
+	// De-escalate all headers in rendered markdown to match our style
+	readmeHtml = strings.NewReplacer(
+		`<h1`, `<h2`,
+		`<h2`, `<h3`,
+		`<h3`, `<h4`,
+		`</h1>`, `</h2>`,
+		`</h2>`, `</h3>`,
+		`</h3>`, `</h4>`,
+	).Replace(readmeHtml)
+
+	return readmeHtml, images, nil
+}
+
+func (this *Application) repoHasTag(repoName string, searchTag string) bool {
+	this.reposMut.RLock()
+	defer this.reposMut.RUnlock()
+
+	repoId, ok := this.reposCacheByName[repoName]
+	if !ok {
+		return false
+	}
+
+	rr := this.reposCache[repoId]
+	return slices.Contains(rr.Topics, searchTag)
+}
+
+func (this *Application) repoURL(repoName string) string {
+	return this.cfg.Gitea.URL + url.PathEscape(this.cfg.Gitea.Org) + `/` + url.PathEscape(repoName)
 }
 
 func (this *Application) internalError(w http.ResponseWriter, r *http.Request, err error) {

router.go

@@ -17,65 +17,60 @@ func (this *Application) ServeStatic(w http.ResponseWriter, r *http.Request) {
 	http.FileServer(http.FS(StaticFiles)).ServeHTTP(w, r)
 }
 
-func (this *Application) ServeHTTP(w http.ResponseWriter, r *http.Request) {
-	if r.Method == `GET` {
-		if r.URL.Path == `/` {
-			this.Homepage(w, r)
+func (this *Application) createRouter() *http.ServeMux {
 
-		} else if r.URL.Path == `/favicon.ico` {
-			w.Header().Set(`Location`, `/static/logo.png`)
-			w.WriteHeader(301)
+	mux := http.NewServeMux()
 
-		} else if r.URL.Path == `/robots.txt` {
-			http.Error(w, "not found", 404)
+	// No trailing slash = not a recursive match
+	mux.HandleFunc(`GET /{project}`, func(w http.ResponseWriter, r *http.Request) {
 
-		} else if parts := this.rxRepoImage.FindStringSubmatch(r.URL.Path); parts != nil {
-			this.Bannerpage(w, r, parts[1], 0) // 0th image
-
-		} else if parts := this.rxRepoImage2.FindStringSubmatch(r.URL.Path); parts != nil {
-			imageIdx, err := strconv.Atoi(parts[1])
-			if err != nil {
-				http.Error(w, "Invalid request", 400)
-				return
-			}
-			this.Bannerpage(w, r, parts[2], imageIdx) // 0th image
-
-		} else if parts := this.rxRepoPage.FindStringSubmatch(r.URL.Path); parts != nil {
+		repoName := r.PathValue("project")
 
 		// Support /repo.html URIs for backward compatibility
-			if strings.HasSuffix(parts[1], `.html`) {
-				w.Header().Set(`Location`, r.URL.Path[0:len(r.URL.Path)-5])
-				w.WriteHeader(301)
-				return
-			}
-
-			// The regexp supports an optional trailing slash
-			// Redirect to canonical no-trailing-slash
-			if strings.HasSuffix(r.URL.Path, `/`) {
-				w.Header().Set(`Location`, `/`+parts[1]) // n.b. parts[1] isn't urldecoded yet
-				w.WriteHeader(301)
-				return
-			}
-
-			// Proper decoding of special characters in repo path component
-			repoName, err := url.PathUnescape(parts[1])
-			if err != nil {
-				http.Error(w, "malformed url encoding in repository name", 400)
+		if strings.HasSuffix(repoName, `.html`) {
+			targetUrl := `/` + url.PathEscape(strings.TrimSuffix(repoName, `.html`))
+			http.Redirect(w, r, targetUrl, 301)
 			return
 		}
 
 		// Maybe it's a redirected project (alternative name)
 		if rename, ok := this.cfg.Redirect[repoName]; ok {
-				w.Header().Set(`Location`, `/`+url.PathEscape(rename))
-				w.WriteHeader(301)
+			http.Redirect(w, r, `/`+url.PathEscape(rename), 301)
 			return
 		}
 
 		this.Repopage(w, r, repoName)
+	})
 
-		} else if strings.HasPrefix(r.URL.Path, `/static/`) {
+	mux.HandleFunc(`GET /{project}/changelog`, func(w http.ResponseWriter, r *http.Request) {
+		this.ChangelogPage(w, r, r.PathValue("project"))
+	})
 
-			if r.URL.Path == `/static/logo.png` && this.cfg.Template.CustomLogoPngBase64 != "" {
+	mux.HandleFunc(`GET /{project}/banner`, func(w http.ResponseWriter, r *http.Request) {
+		this.Bannerpage(w, r, r.PathValue("project"), 0) // 0th image
+	})
+
+	mux.HandleFunc(`GET /{project}/img/{id}`, func(w http.ResponseWriter, r *http.Request) {
+		imageIdx, err := strconv.Atoi(r.PathValue("id"))
+		if err != nil {
+			http.Error(w, "Invalid request", 400)
+			return
+		}
+
+		this.Bannerpage(w, r, r.PathValue("project"), imageIdx) // 0th image
+	})
+
+	mux.HandleFunc(`GET /favicon.ico`, func(w http.ResponseWriter, r *http.Request) {
+		http.Redirect(w, r, `/static/logo.png`, 301)
+	})
+
+	// Wildcard route (ends in /)
+	mux.HandleFunc(`GET /`, func(w http.ResponseWriter, r *http.Request) {
+		if r.URL.Path == `/` {
+			// homepage
+			this.Homepage(w, r)
+
+		} else if r.URL.Path == `/static/logo.png` && this.cfg.Template.CustomLogoPngBase64 != "" {
 
 			logoPng, err := base64.StdEncoding.DecodeString(this.cfg.Template.CustomLogoPngBase64)
 			if err != nil {
@@ -88,11 +83,13 @@ func (this *Application) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 			w.WriteHeader(200)
 			w.Write(logoPng)
 			return
-			}
 
+		} else if strings.HasPrefix(r.URL.Path, `/static/`) {
 			// Embedded resource
-			// r.URL.Path = r.URL.Path[8:]
-			this.ServeStatic(w, r)
+			// Can't use a regular mux route for this, otherwise routes like
+			// e.g. `/static/changelog` would conflict with an actual repo
+			// project named 'static'
+			this.ServeStatic(w, r) // knows to look after /static/ prefix
 
 		} else if r.URL.Query().Get("go-get") == "1" {
 			// This wasn't one of our standard `/repo` paths, but there is the ?go-get=1 parameter
@@ -103,16 +100,14 @@ func (this *Application) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 
 			slashParts := strings.SplitN(r.URL.Path, `/`, 3) // len === 3 is guaranteed from earlier if cases
 
-			w.Header().Set(`Location`, `/`+slashParts[1])
-			w.WriteHeader(301)
-			return
+			http.Redirect(w, r, `/`+slashParts[1], 301)
 
 		} else {
+			// 404
 			http.Error(w, "not found", 404)
 		}
+	})
 
-	} else {
-		http.Error(w, "invalid method", 400)
-	}
+	return mux
 
 }

static/style.css

@@ -141,6 +141,9 @@ body {
 }
 .projbody {	
 }
+.projbody img {
+	max-width: 100%;
+}
 .projbody_halfw {
 	float:left;
 	width: 860px; /* 740px full - 60px rhs column - 2px border */
@@ -219,6 +222,7 @@ img[src*="shields.io"] {
 	height:32px;
 	
 	object-fit: cover;
+	overflow-clip-margin: unset; /* higher quality image resampling on Chrome */ 
 }
 
 .thumbimage {

sync.go

@@ -174,7 +174,7 @@ func (this *Application) sync(ctx context.Context) (bool, error) {
 
 func (this *Application) syncWorker(ctx context.Context) {
 
-	t := time.NewTicker(30 * time.Minute)
+	t := time.NewTicker(60 * time.Minute)
 	defer t.Stop()
 
 	for {