verifyfirst

preflight · 5 checks

I deployed a static site

Files copied to a web root, or pushed to a host that serves them.

Before you call it done

  1. Hash the served bytes against the file on disk, from a client that has never requested the URL.curl -s https://HOST/path | md5sum # compare to md5sum of the local fileguards against NS-007 NS-058
  2. Check which layer answered, not just that something did.curl -s -o /dev/null -w 'code=%{http_code} remote=%{remote_ip} age=%header{age}\n' URLguards against NS-058 NS-059
  3. Request a path that should not exist. A catch-all will answer 200 for it.curl -s -o /dev/null -w '%{http_code}\n' https://HOST/definitely-not-hereguards against NS-022 NS-043
  4. Confirm the copy landed where you meant, not one directory deeper.ls the destination; rsync without a trailing slash nests the source directoryguards against NS-056
  5. Fetch as a client would, following redirects and decompressing.curl -sL --compressed --fail URL | headguards against NS-057 NS-016 NS-042

Plain text: /recipes.txt · all tasks