add security.txt and pgp key

1 files changed, 8 insertions, 0 deletions

diff --git a/src/wellknown.rs b/src/wellknown.rs
index 2ec3255..9c9bc1c 100644
--- a/src/wellknown.rs
+++ b/src/wellknown.rs
@@ -28,3 +28,11 @@ pub fn r_wellknown_matrix_client() -> Cors<Value> {
 pub fn r_wellknown_matrix_server() -> Cors<Value> {
     Cors(json!({"m.server": "matrix.metamuffin.org:443"} ))
 }
+
+#[get("/.well-known/security.txt")]
+pub fn r_wellknown_security() -> &'static str {
+    r#"# In can case you found a security vulnerability in my services and want to disclose them privately, use the information below.
+Contact: https://metamuffin.org/contact
+Encryption: https://metamuffin.org/key.asc
+    "#
+}