try public html

.forgejo/workflows/build.yaml

@@ -12,5 +12,5 @@ jobs:
       - run: npm ci
       - run: npm run build
       - run: mkdir -p /data/nycki.net/site
-      - run: cp site.conf /data/nycki.net/site.conf
+      - run: cp tools/site.conf /data/nycki.net/site.conf
       - run: cp -r _site/* /home/nycki/nycki.net/patches/* /data/nycki.net/site/

tools/site.conf

@@ -20,8 +20,10 @@
   ServerName nycki.net
   SSLEngine on
   Include /etc/letsencrypt/options-ssl-apache.conf
+  SSLCertificateFile /etc/letsencrypt/live/klay.gay/fullchain.pem
+  SSLCertificateKeyFile /etc/letsencrypt/live/klay.gay/privkey.pem
 
-  Header always add Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload;"
+  #Header always add Strict-Transport-Security: "max-age=31536000; includeSubDomains; preload;"
   <If "%{HTTPS} == 'off'">
     <If "%{HTTP:Upgrade-Insecure-Requests} == 1">
       Header always add Vary: Upgrade-Insecure-Requests
@@ -30,14 +32,17 @@
   </If>
 
   DocumentRoot /data/nycki.net/site
-ErrorDocument 404 404.html
+  ErrorDocument 404 404.html
-
   <Directory />
     Options FollowSymLinks MultiViews
     Require all granted
   </Directory>
-  SSLCertificateFile /etc/letsencrypt/live/klay.gay/fullchain.pem
+
-SSLCertificateKeyFile /etc/letsencrypt/live/klay.gay/privkey.pem
+  Alias /p /home/nycki/public_html
+  <Directory /home/nycki/public_html
+    Options FollowSymLinks
+    Require all granted
+  </Directory>
 </VirtualHost>
 
 <VirtualHost *:443>