本站笔记是对公开资料的原创性运维概括，每个来源都支撑笔记里的对应结论。链接是权威来源；本站的概括不能替代阅读对应的规范文档。
初次参考集合于 2026-08-22 审阅；随当前版本新增的参考资料于 2026-08-23 审阅。每篇笔记为自己的来源记录核验日期。多数链接在发布环境中可通达；OpenBSD 手册端点在此前的自动可达性检查中偶发超时，因此只记录其稳定的手册 URL，不宣称该次检查成功。
HTTP 与发现
| 参考 | 用途 |
|---|---|
| RFC 9110 — HTTP Semantics | Status codes, validators, conditional requests, and redirect semantics. |
| RFC 9111 — HTTP Caching | Freshness, revalidation, Cache-Control, Age, and Vary. |
| RFC 7538 — 308 Permanent Redirect | Permanent redirects that do not change the request method. |
| RFC 9309 — Robots Exclusion Protocol | The /robots.txt file, parsing, and crawler scope. |
| RFC 1034 — Domain Names: Concepts and Facilities | DNS caching and resolver behavior. |
| RFC 1035 — Domain Names: Implementation and Specification | Record formats and TTL fields. |
| RFC 2308 — Negative Caching of DNS Queries | Cached negative answers and their lifetime. |
| Sitemaps Protocol | XML encoding, host scope, and sitemap size limits. |
MDN: Cache-Control | Practical examples and browser-facing terminology. |
| MDN: Content Security Policy | Resource policies and deployment guidance. |
MDN: Strict-Transport-Security | HTTPS-only browser policy and deployment cautions. |
MDN: Content-Type | Media types and character-set metadata. |
MDN: X-Content-Type-Options | nosniff behavior for script and style destinations. |
| curl manual | HEAD, Range, header, redirect, and transport inspection commands. |
发布与恢复
| 参考 | 用途 |
|---|---|
POSIX rename() | Complete-directory publication and name replacement. |
Linux rename(2) | Filesystem and replacement behavior. |
| GNU tar manual | Artifact transport and extraction. |
| GNU Coreutils: sha2 utilities | Per-file release manifests and checksum verification. |
| sha256sum(1) | Checksum command behavior and output format. |
| systemd.timer(5) | Calendar timers, persistence, and randomized delay. |
| systemd.time(7) | Calendar expression syntax. |
服务器与运维
| 参考 | 用途 |
|---|---|
Caddy: file_server | Static file serving and root selection. |
Caddy: header | Response-header configuration. |
Caddy: encode | Negotiated response compression. |
| Caddy: Automatic HTTPS | Certificate provisioning and HTTPS redirects. |
| systemd.service | Type=, restart behavior, and start-rate limiting. |
| systemd.unit | Unit dependencies and start-limit settings. |
OpenBSD ssh_config | StrictHostKeyChecking and known-host handling. |
OpenBSD ssh-keygen | Host-key fingerprint inspection. |
OpenSSL s_client | TLS connection and SNI inspection. |
OpenSSL x509 | Certificate dates, fingerprints, and expiry checks. |
| Hugo command reference | Clean static-site builds and command options. |
| Hugo directory structure | Source, layout, asset, and static-file boundaries. |
Web 安全
| 参考 | 用途 |
|---|---|
| RFC 8659 — DNS Certification Authority Authorization | CAA lookup and issuer authorization. |
| Let’s Encrypt: CAA | Issuer identifiers and CAA operations. |
| RFC 6797 — HTTP Strict Transport Security | HSTS policy processing and scope. |
| RFC 6265 — HTTP State Management Mechanism | Cookie storage, domain, path, and deletion behavior. |
MDN: Set-Cookie | Cookie attributes and name prefixes. |
本站不声称与其中任何项目有关联。其名称与文档分别归各自的作者与维护者所有。