nginx
tcp/80
The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a6522cc22b0fa
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = https://git.sr.ht/~paulhdk/www.paulhdk.com fetch = +refs/heads/*:refs/remotes/origin/* [branch "redirect"] remote = origin merge = refs/heads/redirect
Open service 46.23.81.157:443 · www.paulhdk.com
2026-01-23 12:46
HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Request-Methods: GET, HEAD, OPTIONS Content-Length: 66 Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts; Content-Type: text/html; charset=utf-8 Last-Modified: Tue, 21 Jan 2025 10:32:35 GMT Vary: Accept-Encoding Date: Fri, 23 Jan 2026 12:46:46 GMT Connection: close <meta http-equiv="refresh" content="0; url=https://paulhdk.com/">
Open service 2a03:6000:1813:1337::157:443 · paulhdk.com
2026-01-22 07:09
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 11651
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Thu, 18 Dec 2025 19:46:12 GMT
Vary: Accept-Encoding
Date: Thu, 22 Jan 2026 07:09:52 GMT
Connection: close
Page title: Paul Heidekrüger
<!doctype html><html lang=en-nz><head><meta charset=utf-8><meta content="width=device-width,initial-scale=1.0" name=viewport><meta content="light dark" name=color-scheme><meta name=description><title>Paul Heidekrüger</title><link href=/img/favicon-32x32.png rel=icon sizes=32x32 type=image/png><link href=/img/favicon-16x16.png rel=icon sizes=16x16 type=image/png><link href=/img/apple-touch-icon.png rel=apple-touch-icon sizes=180x180><style>/* light mode colors */
/* Currently represents dark mode until I fix or report `force_theme` not working for me */
body {
--primary-color: #E5C374;
--primary-pale-color: #292522;
--text-color: #ECE1D7;
--text-pale-color: #798C8C;
--bg-color: #282522;
--highlight-mark-color: #5f75b035;
--blockquote-color: #747983;
--callout-note-color: #5d77ac;
--callout-important-color: #8062b0;
--callout-warning-color: #936e51;
--callout-alert-color: #bc5252;
--callout-question-color: #477389;
--callout-tip-color: #3c8460;
}
/* dark mode colors */
body.dark {
--primary-color: #E5C374;
--primary-pale-color: #5d77ac20;
--text-color: #EAE2D7;
--text-pale-color: #656a74;
--bg-color: #282522;
--highlight-mark-color: #5f75b035;
--blockquote-color: #747983;
--callout-note-color: #5d77ac;
--callout-important-color: #8062b0;
--callout-warning-color: #936e51;
--callout-alert-color: #bc5252;
--callout-question-color: #477389;
--callout-tip-color: #3c8460;
}
/* typography */
body {
--main-font: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";
--code-font: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
--homepage-max-width: 768px;
--main-max-width: 768px;
--avatar-size: 56px;
--homepage-font-size: 16px;
--homepage-line-height: 1.75;
--paragraph-font-size: 16px;
--paragraph-line-height: 1.75;
--aside-font-size: 15px;
--img-border-radius: 0px;
--detail-border-radius: 0px;
--dark-mode-img-brightness: 0.75;
--dark-mode-chart-brightness: 0.75;
--inline-code-border-radius: 2px;
--inline-code-bg-color: var(--primary-pale-color);
--block-code-border-radius: 0px;
--block-code-border-color: var(--primary-color);
--detail-border-color: var(--primary-color);
}
<!-- Melange dark colors-->
<!-- { -->
<!-- "bg":"#292522", -->
<!-- "fg":"#ECE1D7", -->
<!-- "bright_black":"#867462", -->
<!-- "bright_blue":"#A3A9CE", -->
<!-- "bright_cyan":"#89B3B6", -->
<!-- "bright_green":"#85B695", -->
<!-- "bright_magenta":"#CF9BC2", -->
<!-- "bright_red":"#D47766", -->
<!-- "bright_white":"#ECE1D7", -->
<!-- "bright_yellow":"#EBC06D", -->
<!-- "dark_black":"#292522", -->
<!-- "dark_blue":"#273142", -->
<!-- "dark_cyan":"#253333", -->
<!-- "dark_green":"#233524", -->
<!-- "dark_magenta":"#422741", -->
<!-- "dark_red":"#7D2A2F", -->
<!-- "dark_white":"#403A36", -->
<!-- "dark_yellow":"#8B7449", -->
<!-- "black":"#34302C", -->
<!-- "blue":"#7F91B2", -->
<!-- "cyan":"#7B9695", -->
<!-- "green":"#78997A", -->
<!-- "magenta":"#B380B0", -->
<!-- "red":"#BD8183", -->
<!-- "white":"#C1A78E", -->
<!-- "yellow":"#E49B5D", -->
<!-- "variant":"dark", -->
<!-- } --></style><link href=/main.css rel=stylesheet><link href=/hl-light.css id=hl rel=stylesheet><body class=homepage><div id=wrapper><main><section id=info><div id=text><div><span id=name>Paul Heidekrüger</span><span id=id>@paulhdk</span></div></div></section><section id=links><div id=left><a class=instant href=/foss>Open Source</a><a class=instant href=/projects>Projects</a><a class=instant href=/talks>Talks</a></div><div id=right><a rel="noreferrer noopener" aria-label=GitHub href=https://github.com/paulhdk target=_blank> <svg viewbox="0 0 24 24" height=20 width=20 xmlns=http://www.w3.org/2000/svg><path d="M5.88401 18.6531C5.58404 18.4
Open service 46.23.81.157:80 · paulhdk.com
2026-01-22 07:09
HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 22 Jan 2026 07:09:52 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://paulhdk.com/ Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 2a03:6000:1813:1337::157:80 · paulhdk.com
2026-01-22 07:09
HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 22 Jan 2026 07:09:52 GMT Content-Type: text/html Content-Length: 138 Connection: close Location: https://paulhdk.com/ Page title: 302 Found <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html>
Open service 46.23.81.157:443 · paulhdk.com
2026-01-22 07:09
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 11651
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Thu, 18 Dec 2025 19:46:12 GMT
Vary: Accept-Encoding
Date: Thu, 22 Jan 2026 07:09:53 GMT
Connection: close
Page title: Paul Heidekrüger
<!doctype html><html lang=en-nz><head><meta charset=utf-8><meta content="width=device-width,initial-scale=1.0" name=viewport><meta content="light dark" name=color-scheme><meta name=description><title>Paul Heidekrüger</title><link href=/img/favicon-32x32.png rel=icon sizes=32x32 type=image/png><link href=/img/favicon-16x16.png rel=icon sizes=16x16 type=image/png><link href=/img/apple-touch-icon.png rel=apple-touch-icon sizes=180x180><style>/* light mode colors */
/* Currently represents dark mode until I fix or report `force_theme` not working for me */
body {
--primary-color: #E5C374;
--primary-pale-color: #292522;
--text-color: #ECE1D7;
--text-pale-color: #798C8C;
--bg-color: #282522;
--highlight-mark-color: #5f75b035;
--blockquote-color: #747983;
--callout-note-color: #5d77ac;
--callout-important-color: #8062b0;
--callout-warning-color: #936e51;
--callout-alert-color: #bc5252;
--callout-question-color: #477389;
--callout-tip-color: #3c8460;
}
/* dark mode colors */
body.dark {
--primary-color: #E5C374;
--primary-pale-color: #5d77ac20;
--text-color: #EAE2D7;
--text-pale-color: #656a74;
--bg-color: #282522;
--highlight-mark-color: #5f75b035;
--blockquote-color: #747983;
--callout-note-color: #5d77ac;
--callout-important-color: #8062b0;
--callout-warning-color: #936e51;
--callout-alert-color: #bc5252;
--callout-question-color: #477389;
--callout-tip-color: #3c8460;
}
/* typography */
body {
--main-font: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";
--code-font: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
--homepage-max-width: 768px;
--main-max-width: 768px;
--avatar-size: 56px;
--homepage-font-size: 16px;
--homepage-line-height: 1.75;
--paragraph-font-size: 16px;
--paragraph-line-height: 1.75;
--aside-font-size: 15px;
--img-border-radius: 0px;
--detail-border-radius: 0px;
--dark-mode-img-brightness: 0.75;
--dark-mode-chart-brightness: 0.75;
--inline-code-border-radius: 2px;
--inline-code-bg-color: var(--primary-pale-color);
--block-code-border-radius: 0px;
--block-code-border-color: var(--primary-color);
--detail-border-color: var(--primary-color);
}
<!-- Melange dark colors-->
<!-- { -->
<!-- "bg":"#292522", -->
<!-- "fg":"#ECE1D7", -->
<!-- "bright_black":"#867462", -->
<!-- "bright_blue":"#A3A9CE", -->
<!-- "bright_cyan":"#89B3B6", -->
<!-- "bright_green":"#85B695", -->
<!-- "bright_magenta":"#CF9BC2", -->
<!-- "bright_red":"#D47766", -->
<!-- "bright_white":"#ECE1D7", -->
<!-- "bright_yellow":"#EBC06D", -->
<!-- "dark_black":"#292522", -->
<!-- "dark_blue":"#273142", -->
<!-- "dark_cyan":"#253333", -->
<!-- "dark_green":"#233524", -->
<!-- "dark_magenta":"#422741", -->
<!-- "dark_red":"#7D2A2F", -->
<!-- "dark_white":"#403A36", -->
<!-- "dark_yellow":"#8B7449", -->
<!-- "black":"#34302C", -->
<!-- "blue":"#7F91B2", -->
<!-- "cyan":"#7B9695", -->
<!-- "green":"#78997A", -->
<!-- "magenta":"#B380B0", -->
<!-- "red":"#BD8183", -->
<!-- "white":"#C1A78E", -->
<!-- "yellow":"#E49B5D", -->
<!-- "variant":"dark", -->
<!-- } --></style><link href=/main.css rel=stylesheet><link href=/hl-light.css id=hl rel=stylesheet><body class=homepage><div id=wrapper><main><section id=info><div id=text><div><span id=name>Paul Heidekrüger</span><span id=id>@paulhdk</span></div></div></section><section id=links><div id=left><a class=instant href=/foss>Open Source</a><a class=instant href=/projects>Projects</a><a class=instant href=/talks>Talks</a></div><div id=right><a rel="noreferrer noopener" aria-label=GitHub href=https://github.com/paulhdk target=_blank> <svg viewbox="0 0 24 24" height=20 width=20 xmlns=http://www.w3.org/2000/svg><path d="M5.88401 18.6531C5.58404 18.4