From 2f92026ec648d47c25fea6fc8f354fbc04f4d714 Mon Sep 17 00:00:00 2001
From: salmonik <salmonik@tuta.io>
Date: Fri, 30 Oct 2026 00:07:24 +0100
Subject: strip the download page to plain HTML: no CSS, sha256sum-format
 checksums

---
 web/README.md |   5 +-
 web/index.php | 309 ++++++++++------------------------------------------------
 2 files changed, 53 insertions(+), 261 deletions(-)

diff --git a/web/README.md b/web/README.md
index 3c6ee08..5434e28 100644
--- a/web/README.md
+++ b/web/README.md
@@ -2,7 +2,8 @@
 
 `index.php` scans `bin/client` and `bin/server` on every request and renders
 whatever builds it finds, with version, size and SHA-256. No database, no
-JavaScript, no dependencies. PHP 8.0+.
+JavaScript, no CSS, no dependencies. The page is plain browser defaults:
+black text, blue links, monospace checksums. PHP 8.0+.
 
 ## Layout
 
@@ -62,3 +63,5 @@ Then open <http://127.0.0.1:8899/>.
   handful of builds; add an mtime-keyed cache if the directory grows.
 - The page lists every build it finds, newest version first, so old releases
   stay downloadable until you remove them from `bin/`.
+- The checksum block is in `sha256sum` format, so visitors can save it as
+  `SHA256SUMS` and run `sha256sum -c SHA256SUMS`.
diff --git a/web/index.php b/web/index.php
index cd77dad..361fdcf 100644
--- a/web/index.php
+++ b/web/index.php
@@ -164,274 +164,63 @@ foreach (KINDS as $kind => $meta) {
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Download · zagan.bet</title>
 <meta name="description" content="Official zagan.bet client and server downloads.">
-<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:">
-<link rel="icon" href="data:,">
-<style>
-  :root {
-    --bg: #0b0e11;
-    --panel: #11171d;
-    --line: #222c35;
-    --text: #dde6ec;
-    --muted: #8b9aa6;
-    --accent: #5fd0e0;
-    --win: #6ee7a0;
-    --radius: 10px;
-  }
-
-  * { box-sizing: border-box; }
-
-  body {
-    margin: 0;
-    background: var(--bg);
-    color: var(--text);
-    font: 16px/1.55 system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
-  }
-
-  code, pre, .mono {
-    font-family: ui-monospace, "SF Mono", "Cascadia Mono", Menlo, Consolas, monospace;
-  }
-
-  .wrap {
-    max-width: 880px;
-    margin: 0 auto;
-    padding: 3rem 1.25rem 4rem;
-  }
-
-  header { margin-bottom: 2.5rem; }
-
-  h1 {
-    margin: 0 0 .35rem;
-    font: 700 2rem/1.1 ui-monospace, "SF Mono", Menlo, Consolas, monospace;
-    letter-spacing: -.02em;
-  }
-
-  h1 span { color: var(--accent); }
-
-  .tagline { margin: 0; color: var(--muted); }
-
-  .stamp { margin: .6rem 0 0; color: var(--muted); font-size: .8rem; }
-
-  section { margin-top: 2.5rem; }
-
-  h2 {
-    margin: 0 0 .9rem;
-    font-size: .8rem;
-    font-weight: 600;
-    letter-spacing: .12em;
-    text-transform: uppercase;
-    color: var(--muted);
-    border-bottom: 1px solid var(--line);
-    padding-bottom: .6rem;
-  }
-
-  .hint { margin: -.3rem 0 1rem; color: var(--muted); font-size: .9rem; }
-
-  .empty { color: var(--muted); font-size: .9rem; }
-
-  .grid {
-    list-style: none;
-    margin: 0;
-    padding: 0;
-    display: grid;
-    grid-template-columns: repeat(auto-fill, minmax(230px, 1fr));
-    gap: .9rem;
-  }
-
-  .card {
-    background: var(--panel);
-    border: 1px solid var(--line);
-    border-radius: var(--radius);
-    padding: 1rem;
-    display: flex;
-    flex-direction: column;
-    gap: .3rem;
-  }
-
-  .card-head {
-    display: flex;
-    align-items: baseline;
-    justify-content: space-between;
-    gap: .5rem;
-  }
-
-  .card h3 { margin: 0; font-size: 1rem; }
-
-  .ver {
-    font-size: .75rem;
-    color: var(--accent);
-    border: 1px solid var(--line);
-    border-radius: 999px;
-    padding: .1rem .5rem;
-    white-space: nowrap;
-  }
-
-  .card .arch { margin: 0; color: var(--muted); font-size: .85rem; }
-
-  .card .meta { margin: 0; color: var(--muted); font-size: .8rem; }
-
-  .card .btn { margin-top: .7rem; }
-
-  .btn {
-    display: block;
-    text-align: center;
-    text-decoration: none;
-    padding: .55rem .8rem;
-    border-radius: 7px;
-    background: var(--accent);
-    color: #06222a;
-    font-weight: 600;
-    font-size: .92rem;
-  }
-
-  .btn:hover { background: #86e2ee; }
-
-  .btn:focus-visible,
-  summary:focus-visible {
-    outline: 2px solid var(--win);
-    outline-offset: 2px;
-  }
-
-  pre {
-    margin: 0 0 1rem;
-    padding: .85rem 1rem;
-    overflow-x: auto;
-    background: var(--panel);
-    border: 1px solid var(--line);
-    border-radius: var(--radius);
-    font-size: .88rem;
-    line-height: 1.6;
-  }
-
-  pre .c { color: var(--muted); }
-
-  .table-wrap { overflow-x: auto; }
-
-  table {
-    width: 100%;
-    border-collapse: collapse;
-    font-size: .82rem;
-  }
-
-  th, td {
-    text-align: left;
-    padding: .55rem .7rem;
-    border-bottom: 1px solid var(--line);
-    vertical-align: top;
-  }
-
-  th {
-    color: var(--muted);
-    font-weight: 600;
-    font-size: .75rem;
-    letter-spacing: .06em;
-    text-transform: uppercase;
-    white-space: nowrap;
-  }
-
-  td.file { word-break: break-all; }
-  td.sum { word-break: break-all; color: var(--muted); }
-  td.size { white-space: nowrap; color: var(--muted); }
-
-  footer {
-    margin-top: 3rem;
-    padding-top: 1.5rem;
-    border-top: 1px solid var(--line);
-    color: var(--muted);
-    font-size: .88rem;
-  }
-
-  footer p { margin: .6rem 0 0; }
-
-  a { color: var(--accent); }
-</style>
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'">
 </head>
 <body>
-<div class="wrap">
-
-  <header>
-    <h1>zagan<span>.bet</span></h1>
-    <p class="tagline">Terminal betting. Slots, roulette, blackjack and crash.</p>
-    <?php if ($newest > 0): ?>
-      <p class="stamp">Builds published <?= e(gmdate('j M Y H:i', $newest)) ?> UTC</p>
-    <?php endif; ?>
-  </header>
 
-  <main>
-    <?php foreach (KINDS as $kind => $meta): ?>
-      <section>
-        <h2><?= e($meta['title']) ?></h2>
-        <p class="hint"><?= e($meta['hint']) ?></p>
-
-        <?php if ($releases[$kind] === []): ?>
-          <p class="empty">Nothing published yet.</p>
-        <?php else: ?>
-          <ul class="grid">
-            <?php foreach ($releases[$kind] as $release): ?>
-              <li class="card">
-                <div class="card-head">
-                  <h3><?= e(PLATFORMS[$release['platform']] ?? ucfirst($release['platform'])) ?></h3>
-                  <span class="ver">v<?= e($release['version']) ?></span>
-                </div>
-                <p class="arch">
-                  <?= e($release['arch']) ?><?php if (isset(ARCHES[$release['arch']])): ?>
-                    · <?= e(ARCHES[$release['arch']]) ?>
-                  <?php endif; ?>
-                </p>
-                <p class="meta"><?= e(human_size($release['size'])) ?></p>
-                <a class="btn" href="<?= e($release['href']) ?>" download>Download</a>
-              </li>
-            <?php endforeach; ?>
-          </ul>
-        <?php endif; ?>
-      </section>
-    <?php endforeach; ?>
-
-    <?php $all = array_merge($releases['client'], $releases['server']); ?>
-    <?php if ($all !== []): ?>
-      <section>
-        <h2>Checksums</h2>
-        <p class="hint">SHA-256 of every published file.</p>
-        <div class="table-wrap">
-          <table>
-            <thead>
-              <tr>
-                <th>File</th>
-                <th>Version</th>
-                <th>Size</th>
-                <th>SHA-256</th>
-              </tr>
-            </thead>
-            <tbody>
-              <?php foreach ($all as $release): ?>
-                <tr>
-                  <td class="file mono"><?= e($release['file']) ?></td>
-                  <td><?= e($release['version']) ?></td>
-                  <td class="size"><?= e(human_size($release['size'])) ?></td>
-                  <td class="sum mono"><?= e($release['sha256']) ?></td>
-                </tr>
-              <?php endforeach; ?>
-            </tbody>
-          </table>
-        </div>
-      </section>
-    <?php endif; ?>
-  </main>
+<h1>zagan.bet</h1>
+<p>Official client and server builds.</p>
+<?php if ($newest > 0): ?>
+<p>Builds published <?= e(gmdate('j M Y H:i', $newest)) ?> UTC.</p>
+<?php endif; ?>
+
+<h2>Client</h2>
+<p>Needs a terminal of at least 80×24 cells.</p>
+<?php if ($releases['client'] === []): ?>
+<p>Nothing published yet.</p>
+<?php else: ?>
+<ul>
+<?php foreach ($releases['client'] as $release): ?>
+<li><a href="<?= e($release['href']) ?>" download><?= e(PLATFORMS[$release['platform']] ?? ucfirst($release['platform'])) ?> <?= e($release['arch']) ?><?php if (isset(ARCHES[$release['arch']])): ?> (<?= e(ARCHES[$release['arch']]) ?>)<?php endif; ?> — version <?= e($release['version']) ?> — <?= e(human_size($release['size'])) ?></a></li>
+<?php endforeach; ?>
+</ul>
+<?php endif; ?>
+
+<h2>Server</h2>
+<p>Generates its own TLS identity on first run.</p>
+<?php if ($releases['server'] === []): ?>
+<p>Nothing published yet.</p>
+<?php else: ?>
+<ul>
+<?php foreach ($releases['server'] as $release): ?>
+<li><a href="<?= e($release['href']) ?>" download><?= e(PLATFORMS[$release['platform']] ?? ucfirst($release['platform'])) ?> <?= e($release['arch']) ?><?php if (isset(ARCHES[$release['arch']])): ?> (<?= e(ARCHES[$release['arch']]) ?>)<?php endif; ?> — version <?= e($release['version']) ?> — <?= e(human_size($release['size'])) ?></a></li>
+<?php endforeach; ?>
+</ul>
+<?php endif; ?>
+
+<?php $all = array_merge($releases['client'], $releases['server']); ?>
+<?php if ($all !== []): ?>
+<h2>SHA-256</h2>
+<p>Save this block as <code>SHA256SUMS</code> and run <code>sha256sum -c SHA256SUMS</code>. On Windows use <code>Get-FileHash &lt;file&gt;</code>.</p>
+<pre><?php
+$sums = '';
+foreach ($all as $release) {
+    $sums .= $release['sha256'] . '  ' . $release['file'] . "\n";
+}
+echo e($sums);
+?></pre>
+<?php endif; ?>
 
-  <footer>
-    <h2>Running it</h2>
-    <pre><code><span class="c"># client (use the file you downloaded)</span>
-chmod +x &lt;downloaded-client&gt;
+<h2>Running it</h2>
+<p>Client:</p>
+<pre><code>chmod +x &lt;downloaded-client&gt;
 ./&lt;downloaded-client&gt;</code></pre>
-
-    <pre><code><span class="c"># server: first run creates identity.p12, key.pem and cert.pem</span>
-chmod +x &lt;downloaded-server&gt;
+<p>Server, first run creates <code>identity.p12</code>, <code>key.pem</code> and <code>cert.pem</code>:</p>
+<pre><code>chmod +x &lt;downloaded-server&gt;
 ./&lt;downloaded-server&gt; --init
 ./&lt;downloaded-server&gt; -i 0.0.0.0 -p 11525</code></pre>
 
-    <p>Windows: run the <code>.exe</code> from Windows Terminal or another real terminal.</p>
-    <p>Verify a download before running it: <code>sha256sum &lt;file&gt;</code> (Linux) or <code>Get-FileHash &lt;file&gt;</code> (Windows).</p>
-  </footer>
+<p>Windows: run the <code>.exe</code> from Windows Terminal or another real terminal.</p>
 
-</div>
 </body>
 </html>
-- 
cgit v1.2.3