Deploy HTTP Content Security Policy on openingh.ypid.de and document it

docs/deployment.rst

@@ -0,0 +1,35 @@
+deployment and hosting
+======================
+
+openingh.openstreetmap.de
+-------------------------
+
+* https://wiki.openstreetmap.org/wiki/FOSSGIS/Server/Projects/opening_hours.js
+* https://github.com/opening-hours/opening_hours.js/issues/169
+
+
+openingh.ypid.de
+----------------
+
+Webserver deployment is handled by DebOps_, ypid-ansible-common_ and debops.nginx_.
+
+The following Webserver configuration is currently deployed:
+
+.. code-block:: yaml
+
+   nginx__servers:
+
+     - type: 'default'
+       name: [ 'openingh.ypid.de', 'openingh.openstreetmap.de' ]
+       owner: 'osm'
+       csp: True
+       csp_policy: "default-src 'none'; script-src 'self' 'unsafe-inline'; connect-src https://overpass-api.de https://nominatim.openstreetmap.org https://localhost:8111; img-src 'self' data: https://*.tile.openstreetmap.org https://*.tile.opencyclemap.org; style-src 'self' 'unsafe-inline'"
+       location_list:
+         - pattern: '/stats'
+           options: 'return 307 http://openingh.openstreetmap.de$request_uri;'
+
+Deployment of the site is done with the Makefile in this repository. Have a look at the ``deploy-on-ypid.de`` target.
+
+.. _DebOps: https://debops.org/
+.. _debops.nginx: https://github.com/debops/ansible-nginx
+.. _ypid-ansible-common: https://github.com/ypid/ypid-ansible-common/