commit df4efbe059ac5cb2548f65e035bb5e1cb046dcd4 Author: Mieszko Makuch Date: Thu Sep 3 16:21:03 2026 +0200 content: news, pages and uploads imported from the portal repository diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..e43b0f9 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.DS_Store diff --git a/README.md b/README.md new file mode 100644 index 0000000..05dadf5 --- /dev/null +++ b/README.md @@ -0,0 +1,19 @@ +# CTAO Science Portal — content + +Editorial content of the CTAO Science Portal, separated from the portal code +so editorial history stays clean and publishing never mixes with development. + +| Path | What | +|---|---| +| `news/*.md` | Articles — Markdown + frontmatter | +| `pages/*.md` | Static pages (contact, privacy, disclaimer) | +| `uploads/` | Editor-uploaded media (the CMS converts images to WebP) | + +## How to edit + +Editors use the visual editor at the portal's `/admin/` page (sign in with a +Gitea account) — every save is a commit here, and the site republishes +automatically within seconds. Direct git commits work exactly the same way. + +The portal code lives in the `ctao-portal` repository; its build overlays +this repository's content and renders the static site. diff --git a/news/15th-council-meeting-report.md b/news/15th-council-meeting-report.md new file mode 100644 index 0000000..5dfa128 --- /dev/null +++ b/news/15th-council-meeting-report.md @@ -0,0 +1,29 @@ +--- +title: "15th CTAO Council Meeting Report from the Managing Director" +description: "The 15th meeting of the CTAO Council was held 13-14 November in La Palma, shortly after the LST telescope prototype was inaugurated on the Observatorio del Roque de los Muchachos, the northern hemisphere site of the CTA Observatory." +date: 2018-12-18 +category: news +author: CTAO +cover: /uploads/Council-768x432.jpg +draft: false +--- + +The 15th meeting of the CTAO Council was held 13-14 November in La Palma. The location was very suitable considering that on October 10, the LST telescope prototype was inaugurated on the Observatorio del Roque de los Muchachos, the northern hemisphere site of the CTA Observatory. This gave the delegates the opportunity to admire the first impressive instrument of the “family of 118” that shall constitute the largest system of telescopes ever constructed in the world. Within this festive atmosphere, which contributed to an excellent collaboration with our colleagues from the Instituto de Astrofísica de Canarias, the Council dealt with several crucial topics and made decisions that will mark and consolidate CTA’s future. It was also a meeting of transition in the Council governance: Gabriel Chardin was re-elected as Chair for another year and Markus Schleier succeeded Giampaolo Vettolani, who completed his mandate as Vice Chair. We are very grateful to Giampaolo for his contributions to the Council in his service as both Chair and Vice Chair since the Council’s inception. + +## Investment and budget growth + +An important highlight from the meeting is that we saw the investment in CTA continuing to grow. Both Australia and Poland signed the Memorandum of Understanding for the construction of CTA, thus formally reinforcing the existing involvement of their scientific community and enlarging the international participation in the CTA project. A significant consequence, jointly with the increased commitment of France, is our advancement toward the threshold funding: we have reached 94% of the 250 M€ goal. Additionally, the Swiss government expressed the intention to increase its contribution in the next two years. + +Finances were a major focus of the meeting. Beyond the nomination of the company auditor for the year 2018 and the standard report on the current budget status, we discussed the 2019 budget extensively. As a result, the funding agencies have approved to contribute a consistent increase of about 4 M€ in 2019, well beyond the 2.4 M€ of 2018. This will allow the management to further develop the recruitment campaign necessary to reach the critical size of staff to prepare and manage the construction phase. The CTAO has grown from 16 members (January 2018) to 30 (expected in January 2019), with the objective to reach 60 members by December 2019, including staff for CTAO Headquarters, the Science Data Management Centre and the CTA-North site. + +## A new pathfinder strategy + +In an effort to continue our progress toward construction, I proposed a new pathfinder strategy as an approach to advance our technical progress on CTA sites. According to the statutes, CTA construction can only start with the advent of the final legal entity (the CTAO ERIC); which challenges us to address our transition to an ERIC while simultaneously continuing the progress of the various project phases. With the pathfinder strategy, CTAO can enter an agreement to install an instrument on site, at the contributor’s cost, for testing purposes without the CTAO making a decision about the final technical design and executing an In-Kind Contribution (i.e. a pathfinder may have to be removed from the site). The new pathfinder strategy was well-received by the Council. + +## Status of the CTAO ERIC + +As for the status of the CTAO ERIC, we have seen great progress in 2018, with several meetings taking place that have pushed us steadily toward our new and final legal entity. At the Council meeting, a legal consultant presented an analysis that was very reassuring about the tax conditions and transfer of assets to the CTAO ERIC, and it seems this matter will not be a showstopper to the process. + +## Agreements for the CTA-South site + +And, finally, perhaps one of the most important themes for the future of CTA has been the evolution toward the signature of the agreements that will allow for the formalization of the ESO site as the location of the CTA-South array. Thanks to the strong  and positive intervention of the ESO Director General, we have been able to solve the residual impediments rising from some formalities related to the ERIC application, and which put us in the position to sign the three lateral agreements in Santiago, Chile during the week of 17 December! diff --git a/news/2025-year-in-review-a-message-from-the-ctao-director-general.md b/news/2025-year-in-review-a-message-from-the-ctao-director-general.md new file mode 100644 index 0000000..2d9111a --- /dev/null +++ b/news/2025-year-in-review-a-message-from-the-ctao-director-general.md @@ -0,0 +1,38 @@ +--- +title: "2025 Year in Review: A Message from the CTAO Director General" +description: "2025 has been a year of profound transformation for the CTAO. We began this journey in January with a historic milestone: officially becoming an ERIC. This marked the official start of the CTAO construction phase. A major step forward.…" +date: 2025-12-22 +category: news +author: CTAO +cover: /uploads/CTAOHolidaysCard_2025-1600x1066.jpeg +draft: false +--- + +2025 has been a year of profound transformation for the CTAO. We began this journey in January with a historic milestone: [officially becoming an ERIC](https://www.ctao.org/news/the-ctao-becomes-an-eric/). This marked the official start of the CTAO construction phase. A major step forward. + +## Growing our team and membership + +This year we have seen the growth of our staff and the capabilities of our organisation. Across our Central Organisation headquarters in Bologna, the Science Data Management Centre in Zeuthen, CTAO-North in La Palma, and CTAO-South in Chile, [our expanding team](https://www.ctao.org/news/ctao-growth-defines-the-first-quarter-of-2025/) increasingly has the expertise and passion needed to push the project further than ever. We’ve also grown as a global family, [welcoming Switzerland and Croatia as members](https://www.ctao.org/news/switzerland-and-croatia-officially-become-members-of-the-ctao-eric/) of the CTAO ERIC. And this growth will not stop.  + +## Progress at the telescope sites + +Looking at our sites, their vista is physically changing. At CTAO-North, the LST Collaboration has worked tirelessly and the final three Large-Sized Telescopes are [nearly complete](https://www.ctao.org/news/camera-installation-marks-completion-of-lst-4-construction/) with their inauguration planned for 2026. Meanwhile, the SST and MST Collaborations have also made remarkable progress with the [first telescopes](https://www.ctao.org/news/small-sized-telescopes-pass-readiness-review-to-proceed-to-factory-testing/) expected to be delivered to our southern site in 2026. This is all being done with the support and guidance of the Central Organisation’s Telescope and System Engineering groups. + +On the construction front at CTAO-South, [foundations and roads are now under construction](https://www.ctao.org/news/telescope-construction-begins-on-ctaosouth-with-signing-of-major-contract/) with an expected finish date in June. This monumental endeavour was just celebrated in our [CTAO-South Groundbreaking Ceremony](https://www.ctao.org/news/groundbreaking-ceremony-marks-the-beginning-of-ctao-south-array-construction-in-chile/): the final great milestone of 2025. Together with the support of the Computing and Science teams, we will be ready to operate the telescopes and generate first data in 2027, in both the north and southern sites.  + +This progress is possible because of the dedicated work of the [Central Organisation staff](https://www.ctao.org/organisation/team/) across all fronts—including the essential, behind-the-scenes efforts of our Administration and Director’s Office staff, whose support has ensured a smooth transition to the ERIC. + +## Inspiring curiosity in everyone + +We want to make sure that the CTAO will generate fabulous science but also promote curiosity inspiring everyone from [school children and university students](https://www.linkedin.com/posts/ctao-universe_recap-giornatecosmiche-first-activity-7395068031896530946-qOyF?utm_source=share&utm_medium=member_desktop&rcm=ACoAAA3CjTEBeNrPV6blg06qU6xRGyhihLj1oO4) to [citizens and scientific leaders](https://www.ctao.org/news/ctao-joins-the-starmus-festival-2025-in-la-palma/). This year we held the [second CTAO summer school](https://www.instagram.com/p/DN2rurB1MDz/) and awarded the [first Werner Hofmann Scientific Award](https://www.ctao.org/news/shotaro-abe-wins-first-werner-hofmann-scientific-award/) to an outstanding early career researcher. + +## Looking ahead to 2026 + +2025 was a year of new starts and building foundations; in 2026 we will build further. + +On behalf of the CTAO, I would like to thank our teams and partners around the world for their continued support and the opportunity to continue this journey together. + +I wish you all a very happy holiday season and a prosperous New Year! + +**Stuart McMuldroch** +CTAO Director General diff --git a/news/acada-software-system-passes-its-critical-design-review.md b/news/acada-software-system-passes-its-critical-design-review.md new file mode 100644 index 0000000..54d02ae --- /dev/null +++ b/news/acada-software-system-passes-its-critical-design-review.md @@ -0,0 +1,29 @@ +--- +title: "ACADA Software System Passes its Critical Design Review" +description: "On September 23, the CTAO ACADA Collaboration achieved yet another milestone when the CTAO Central Organisation officially approved and closed out the Critical Design Review (CDR) of the Array Control and Data Acquisition (ACADA) system.…" +date: 2024-10-04 +category: news +author: CTAO +cover: /uploads/Screenshot-2024-10-04-at-12.17.16-768x432.png +draft: false +--- + +On September 23, the [CTAO ACADA Collaboration](https://www.ctao.org/emission-to-discovery/data-and-computing/) achieved yet another milestone when the [CTAO Central Organisation](https://www.ctao.org/organisation/team/) officially approved and closed out the Critical Design Review (CDR) of the Array Control and Data Acquisition (ACADA) system. The approval of the CDR, an in-depth evaluation to ensure the system design meets all the requirements of the Observatory, marks a new phase in the project, moving from testing to integrating the advanced software packages that will operate the arrays. + +## What the ACADA system does + +The ACADA system includes all the software responsible for the supervision and control of telescopes and calibration instruments at both CTAO array sites. The system ensures that the execution of the astronomical observations is accurate and efficient, managing the data acquisition and compression of the raw data, handling science alerts to automatically rearrange the observation schedule and to inform other observatories of interesting gamma-ray events, and providing the user interface for the site operators and astronomers. Thus, as an orchestra director guides the different instrumentalists to produce music, the ACADA software controls a great variety of sub-systems to make the telescopes and support instruments operate together harmoniously to allow the data to flow. + +## Integration campaigns with LST-1 + +Developing such a complex system requires many steps or “releases.” Getting to this point with ACADA, alone, has been the result of around 40 people from 10 institutes from six countries working together over the past 4-5 years to prepare and test the software to ensure it is ready to be used by the CTAO. To evaluate the first release, members of the ACADA Collaboration traveled to the [CTAO-North](https://www.ctao.org/emission-to-discovery/array-sites/ctao-north/) site in La Palma, Spain, in September-October 2023 to carry out [two separate integration campaigns](https://www.ctao.org/news/major-telescope-operations-milestone-with-acada-integration/) with the [Large-Sized Telescope (LST)](https://www.ctao.org/emission-to-discovery/telescopes/lst/) prototype or LST-1, in cooperation with LST Collaboration experts. The campaigns, [documented in a series of interviews](https://www.youtube.com/playlist?list=PLqd_CmPv1afbrmKxp2hJarvTgFVXq8ysB), were a complete success, exhibiting that the system could operate a telescope as expected and allowing researchers to identify and solve minor issues. The results of this integration were also considered during the evaluation of the CDR as a proof-of-concept for the implementation of the system’s design. + +## Approving the Critical Design Review + +During the CDR, initiated in October 2023, a panel of internal and external experts identified two main tasks that needed to be completed to fulfill the review objectives, as well as other recommendations for improvement. By successfully addressing the issues, the CDR was approved and closed in September this year. + +## Next steps for the collaboration + +With this important step achieved, the ACADA Collaboration will now keep working on the implementation of the successive releases of the software, preparing for its integration with multiple telescopes and other instrumentation on [both array sites](https://www.ctao.org/emission-to-discovery/array-sites/) for the eventual acceptance of the full system by the Central Organisation. + +Congratulations to the ACADA Collaboration on this significant milestone! diff --git a/news/aes-andes-announces-cancellation-of-inna-the-industrial-complex-planned-near-paranal.md b/news/aes-andes-announces-cancellation-of-inna-the-industrial-complex-planned-near-paranal.md new file mode 100644 index 0000000..6227e0d --- /dev/null +++ b/news/aes-andes-announces-cancellation-of-inna-the-industrial-complex-planned-near-paranal.md @@ -0,0 +1,25 @@ +--- +title: "AES Andes Announces Cancellation of INNA, the Industrial Complex Planned Near Paranal" +description: "On 23 January, AES Andes announced on their website that they have cancelled plans to build the INNA Project, an industrial green hydrogen and green ammonia project planned near the European Southern Observatory’s (ESO’s) Paranal…" +date: 2026-02-03 +category: news +author: CTAO +cover: /uploads/DSC7159-CC-768x512.jpg +draft: false +--- + +On 23 January, AES Andes announced [on their website](https://www.aesandes.com/en/press-release/aes-andes-focus-renewables-and-storage-discontinues-green-hydrogen-development) that they have cancelled plans to build the INNA Project, an industrial green hydrogen and green ammonia project planned near the European Southern Observatory’s (ESO’s) Paranal Observatory, to focus on their renewable energy portfolio instead. Formal confirmation will arrive once the project is officially withdrawn from Chile’s Environmental Assessment Service (SEA, in Spanish). + +## Threat to Paranal Observatory + +Last year, ESO publicly [raised the alarm](https://www.eso.org/public/unitedkingdom/news/eso2501/?lang) about the threat that the INNA megaproject posed to the Paranal Observatory, a site renowned for having the world’s darkest and clearest skies for astronomy and the location of the [CTAO’s southern hemisphere array (CTAO-South)](https://www.ctao.org/emission-to-discovery/array-sites/ctao-south/). The project, proposed by AES Andes, a subsidiary of the U.S. power company AES Corporation, involved multiple energy and processing facilities spread over an area of more than 3,000 hectares, the size of a small city. Its planned location was situated just [a few kilometres from the Paranal telescopes](https://www.eso.org/public/unitedkingdom/images/INNA-map-EN/). An in-depth [technical analysis issued by ESO](https://www.eso.org/public/unitedkingdom/news/eso2506/) in March 2025 revealed that INNA’s impact would cause devastating and irreversible damage, particularly regarding light pollution, micro-vibrations, dust, and an increase of the air turbulence in the area. + +## Welcoming the announcement + +> “While we await the company’s official withdrawal from SEA, we very much welcome this announcement. I would like to extend my deep and sincere appreciation to everyone who advocated for the protection of Paranal’s pristine skies,” says Stuart McMuldroch, CTAO Director General. “The CTAO remains committed to the preservation of dark and quiet skies, and we will continue collaborating with our hosting partners at ESO towards that goal.” + +## Broader lessons for observatories + +Reflecting on the announced cancellation, ESO has also emphasised the broader lessons this situation provides regarding industrial projects near astronomical facilities. In [their press release](https://www.eso.org/public/unitedkingdom/news/eso2602/), they note that “the INNA case and its [proposed location](https://www.eso.org/public/images/INNA-map-EN/) highlight the urgent need to establish clear protection measures in the areas around astronomical observatories. Such measures are essential to allow astronomical observatories to continue operating.” Safeguarding this natural heritage is vital not only for future generations but also for the continued exploration of the Universe by cutting-edge facilities like the CTAO. + +Safeguarding this natural heritage is vital not only for future generations but also for the continued exploration of the Universe by cutting-edge facilities like the CTAO. diff --git a/news/amanar-under-the-same-sky.md b/news/amanar-under-the-same-sky.md new file mode 100644 index 0000000..56489f6 --- /dev/null +++ b/news/amanar-under-the-same-sky.md @@ -0,0 +1,33 @@ +--- +title: "AMANAR: Under the Same Sky" +description: "This summer, the CTA Observatory will collaborate in the “AMANAR: Under the same sky” project in the Canary Islands and in October in Tindouf, Algeria. The project will use astronomy to promote and support the scientific education of young…" +date: 2019-07-08 +category: news +author: CTAO +cover: /uploads/imagen-1-768x510.jpg +draft: false +--- + +[AMANAR website](https://www.galileomobile.org/amanar) + +[IAC press release (en español)](http://www.iac.es/divulgacion.php?op1=16&id=1585) + +On 8 July 2019, “[AMANAR: Under the same sky](https://www.galileomobile.org/amanar)”, an initiative to promote and support the scientific education of children living in the Saharawi refugee camps in Tindouf (Algeria), was launched in Gran Canaria (Canary Islands, Spain). The project, conceived by the international organization [GalileoMobile](http://www.galileo-mobile.org/) and the [Asociación Canaria de Amistad con el Pueblo Saharaui](http://www.acapscanarias.com/) (ACAPS), consists of a combination of outreach activities and visits to the Canary observatories with the children in July and August as part of  their summer in the Canary Islands with the “[Holidays in Peace](https://www.fmreview.org/peopletrafficking/crivello-fiddian-chatty)” program. The project will also include a visit to the refugee camps by a group of scientists and experts in October. The Cherenkov Telescope Array Observatory (CTAO) is one of the participating partners in this project, supporting the organization of activities and the provision of educational material for the camp visits. + +## Project origins and partners + +AMANAR, which means “Pleiades” in Berber, was born as an outreach project to inspire the Saharawi community through the observation of the Universe and the development of scientific skills, as well as to promote peace, common understanding and a sense of world citizenship under the same sky. The project, conceived by GalileoMobile and ACAPS, was selected as a “Special Project” within the International Astronomical Union’s (IAU’s) [100th Anniversary activities](https://www.iau-100.org/). It is co-funded by the [Instituto de Astrofísica de Canarias](http://www.iac.es/index.php?lang=en) (IAC) and the IAU’s Office of Astronomy for Development and counts on the collaboration of CTAO, Gran Telescopio de Canarias (GTC), Virgo Collaboration , IAU’s Office for Astronomy Outreach, IAU’s Astronomy Translation Network, Galileo Teacher Training Program (GTTP), Cielos de La Palma, Asociación Canaria de Solidaridad con el Pueblo Saharaui (ACSPS), Fundación Observatorio de Temisas, Agrupación Astronómica de Gran Canaria, Asociación Astronómica AMNIR, TITSA and CEIP Juan de Zamora. + +## Summer activities and camp visit + +The summer activities in the Canary Islands within the “Holidays in Peace” program will be carried out in Tenerife (July 20), La Palma (27 July) and Gran Canaria (August 3). In Tenerife and La Palma, the Saharawi children will join us in a visit to the observatories, where they will get an up-close look at some of the telescopes, such as the Large-Sized Telescope prototype (LST-1) located at the El Roque de los Muchachos Observatory (La Palma). Moreover, the group has crafted educational and outreach workshops for the children to inspire their interest in the Cosmos and develop their creativity. These activities include designing a new telescope to catch gamma rays and learning about the Solar System, among others. CTAO Outreach and Education Coordinator, Alba Fernández-Barral, and the Outreach and Communication Officer, Megan Grunewald, have actively participated in the organization of activities for these two sites and will join the group on these dates. The last activity will take place in Gran Canaria, in the Juan de Zamora school (Arucas), where the Saharawi and local children will learn about astronomy and will enjoy the night sky together. The astronomical program within the “Holidays in Peace” is expected to continue for the next three years. The project will close this year in October with a visit to the refugee camps in Tindouf, where scientists and experts from different organizations will carry out workshops at schools and will study and disseminate the astronomical knowledge of the Saharawi population. + +> “The project has a long-term goal of contributing to raise awareness, at the national and international level, about the hard conditions that the Saharawi people must live in the refugee camps, which has lasted already for 40 years. To do so, we will create different audiovisual materials, such as an immersive video and a documentary, with which we will give a voice to the participants and disseminate their message of peace and social justice,” explains the main organizer Sandra Benítez Herrera, astrophysicist and science communicator at the IAC’s Communication and Scientific Culture Unite (UC3) and member of GalileoMobile since 2011. “The institutions collaborating in the project have committed to help in this sense, too.” + +## The CTAO Astrodiversity program + +The CTAO’s participation is within the framework of its own Astrodiversity program. The CTAO is a global organisation proud of its diversity that aims to become a reference of equity and respect in science, as well as to work internationally to achieve equality in our field. Based on this idea, the CTAO Outreach, Education and Communication group has created the Astrodiversity program, under which it joins all its diversity-related activities. + +## About GalileoMobile: + +GalileoMobile is an international project, itinerant and non-profit, whose objective is to share Astronomy with students and teachers of rural communities with reduced access to programs of this type. The team consists of a group of 15 volunteer astronomers, educators and science communicators from around the world. Since its creation in 2008, GalileoMobile has reached more than 1,400 teachers and 16,000 students, donating hundreds of telescopes and organizing public sky observations for thousands of people in 15 countries: Argentina, Bolivia, Brazil, Chile, Colombia, Cyprus, Dominican Republic, Ecuador, Guatemala, India, Nepal, Peru, Spain, Uganda and the United States of America. diff --git a/news/architektura-demo-git-cms.md b/news/architektura-demo-git-cms.md new file mode 100644 index 0000000..1b7517b --- /dev/null +++ b/news/architektura-demo-git-cms.md @@ -0,0 +1,175 @@ +--- +title: "Jak działa to demo: portal statyczny + CMS oparty o git" +description: "Architektura rozwiązania, przydatne linki i porównanie klas rozwiązań: strona w 100% statyczna z graficznym edytorem treści vs CMS z własną bazą danych." +date: 2026-07-23 +category: demo +author: Cyfronet +cover: /diagrams/cover-git-cms.svg +lang: pl +draft: false +--- + +Ten portal to **statyczne pliki HTML** generowane z plików Markdown trzymanych +w repozytorium git. Redaktor dostaje **graficzny edytor w przeglądarce** — +a mimo to **po stronie publicznej** nie działa żadna aplikacja ani baza: +między czytelnikiem a treścią jest wyłącznie serwer plików. Jedyny działający +serwis (Gitea) obsługuje edycję i stoi poza ścieżką czytelnika — wracamy do +tego uczciwie niżej. Ten artykuł został napisany i opublikowany dokładnie tą +ścieżką. + +## Od zapisu do publikacji + +![Pięć kroków publikacji: zapis w edytorze → commit w repo → detekcja zmiany → build strony → publikacja](/diagrams/od-zapisu-do-publikacji.svg) + +Publikacja jest automatyczna — zapis w edytorze po chwili sam pojawia się +na stronie, bez żadnego ręcznego deployu. Każda zmiana to commit, więc +**pełna historia treści i możliwość cofnięcia są w gicie za darmo**. + +## Jak to wygląda na maszynie + +![Architektura na maszynie demo: redaktor zapisuje przez Sveltię do Gitei, timer systemd uruchamia jednorazowy kontener builda Astro, wynik trafia do wolumenu releases, a nginx serwuje czytelnikom wyłącznie statyczne pliki](/diagrams/architektura-maszyna.svg) + +Dla porównania — ta sama maszyna z klasycznym CMS-em. Układ diagramu jest +celowo identyczny, żeby różnice było widać na pierwszy rzut oka: tu każdy +element działa bez przerwy, a panel logowania i aplikacja są wystawione +do internetu. + +![Architektura klasycznego CMS z bazą danych: aplikacja z publicznym panelem admina i renderowaniem na żądanie działa non stop, obok baza danych wymagająca backupów i wolumen mediów](/diagrams/architektura-cms-z-baza.svg) + +## Gdzie co jest + +| Co | Gdzie | +|---|---| +| Portal | strona główna tego serwisu | +| Edytor treści | `/admin/` (link „Content editor" w stopce) | +| Gitea (repo `ctao/portal`) | port 3000 na maszynie demo | +| Konto demo | użytkownik `ctao` (hasło u prowadzącego demo) | +| Dokumentacja wdrożenia | katalog `deploy/` w repo: `README.md` (runbook) i `DEPLOY-LOG.md` (pełna historia decyzji) | + +Całość działa w podmanie na jednej maszynie: kontener Gitei, kontener nginx +i jednorazowy kontener builda odpalany przez systemd timer. + +## Dlaczego strona statyczna + +![Porównanie powierzchni ataku: CMS z bazą wystawia publicznie aplikację, panel logowania, bazę i pluginy — tu publiczne są tylko pliki HTML, a edycja idzie przez git dla zalogowanych](/diagrams/powierzchnia-ataku.svg) + +- **Bezpieczeństwo**: publicznie wystawione są tylko pliki. Nie istnieje + panel admina dostępny z internetu, baza do wykradzenia ani runtime z CVE. +- **Utrzymanie**: nie ma aplikacji, która musi być monitorowana i + aktualizowana pod presją łatek bezpieczeństwa. Do utrzymania zostaje git + (który i tak utrzymujemy) i krótki skrypt builda. +- **Szybkość**: statyczny HTML to najszybsza możliwa strona — istotne też + dla SEO. +- **Historia**: wersjonowanie treści to naturalna cecha gita, nie płatna + funkcja produktu. + +## Dwie klasy rozwiązań + +Linia podziału jest często mylona: nie chodzi o to, czy treść leży w bazie +czy w plikach, tylko o to, **czy między czytelnikiem a treścią stoi +działająca aplikacja**. + +| | Statyczne + git-CMS *(to demo)* | CMS serwujący stronę aplikacją | +|---|---|---| +| Przykłady | Sveltia, Decap (+ Astro / Hugo / Eleventy) | Strapi, WordPress, Drupal, Grav, TinaCMS | +| Treść żyje w | plikach Markdown w gicie | zwykle w bazie; Grav — w plikach, Tina — w gicie | +| W produkcji działa | serwer plików | aplikacja (zwykle + baza), non stop | +| Utrzymanie | skrypt builda + serwis gitowy | patche, aktualizacje, backupy bazy | +| Historia zmian | git, wbudowana | zależnie od produktu (bywa płatna) | + +Dwa doprecyzowania, żeby tabela nie upraszczała: **Grav** trzyma treść +w plikach bez żadnej bazy — ale stronę i tak serwuje aplikacja PHP, więc pod +względem powierzchni ataku i utrzymania należy do prawej kolumny. **TinaCMS** +trzyma treść wręcz w Markdownie w gicie, ale do działania edytora wymaga +stale działającego backendu z bazą — jest hybrydą, która dziedziczy koszty +obu światów. + +Ograniczenia poszczególnych rozwiązań, które zweryfikowaliśmy podczas +researchu: + +- **Strapi** — historia wersji treści nie istnieje w darmowym self-hosted + (tylko płatne plany Growth/Enterprise). Wymaga stale działającego Node + + Postgresa i regularnych aktualizacji. +- **WordPress** — największy ekosystem, ale i największa historia podatności + (głównie pluginy); publiczny panel logowania i PHP do ciągłego patchowania. +- **Grav** (PHP, flat-file — „lekka" alternatywa) — poważne podatności RCE + w ostatnich latach; nadal wymaga serwera PHP wystawionego do internetu. +- **TinaCMS** — edytuje Markdown, ale wymaga backendu: chmura Tina jest + darmowa tylko do 2 użytkowników, a self-hosting to własny serwer Node + + baza (Mongo/Postgres) + auth — wracamy do utrzymywania aplikacji. +- **Ryzyko open-core**: funkcje potrafią z czasem przechodzić do płatnych + planów (przykład wyżej). Gdy treść i jej historia leżą w gicie, nie ma + funkcji, którą dostawca mógłby przenieść do płatnego planu. + +## Plusy i minusy obu podejść + +Portal ma być utrzymywany przez co najmniej 6 lat, więc bilans trzeba robić +w dwóch horyzontach. Poniżej ocena podejść jako klas rozwiązań, nie +konkretnych produktów. + +**Krótkoterminowo (uruchomienie i pierwsze miesiące)** + +| | Statyczne + git | CMS z bazą | +|---|---|---| +| Plusy | mało ruchomych części od pierwszego dnia; edytor graficzny gotowy; historia i rollback od razu, w gicie | bogatszy panel od ręki: role i uprawnienia, workflow redakcyjny, relacje między treściami, więcej gotowych integracji | +| Minusy | uprawnienia proste (dziedziczone z gita — bez ról redakcyjnych); przeglądanie historii na razie w interfejsie gita, nie w edytorze | więcej komponentów do postawienia, spięcia i zabezpieczenia od pierwszego dnia (aplikacja, baza, backupy) | + +**W horyzoncie 6 lat** + +| | Statyczne + git | CMS z bazą | +|---|---|---| +| Plusy | strona publiczna bez aplikacji = brak presji łatek na ścieżce czytelnika; do utrzymania zostaje serwis gitowy (najlepiej ten, który zespół i tak ma); treść w otwartym formacie przetrwa każdą wymianę narzędzi | jeśli z czasem będą potrzebne funkcje aplikacyjne (konta, personalizacja, treści silnie strukturalne), platforma już je ma | +| Minusy | przy bardzo dużej skali (tysiące stron) buildy rosną i wymagają optymalizacji; zaawansowane funkcje redakcyjne zależą od tempa rozwoju narzędzi open-source | kilka dużych migracji wersji w 6 lat (zmiany łamiące); baza wymaga backupów i testów odtwarzania; stała powierzchnia ataku; ryzyko przenoszenia funkcji do płatnych planów | + +## „Czy Gitea to nie jest po prostu drugi CMS?" + +Uczciwe pytanie: Gitea też ma logowanie, bazę i wymaga aktualizacji +bezpieczeństwa, a dla edytorów musi być dostępna spoza VPN. Czy różnica nie +sprowadza się więc do tego, że zamiast CMS-a utrzymujemy Giteę? + +Częściowo tak — i dlatego nie twierdzimy, że utrzymanie jest zerowe. Różnica +polega na trzech rzeczach: + +- **Gitea stoi poza ścieżką czytelnika.** Może mieć przerwę, aktualizację, + a nawet zostać przejęta — portal dalej stoi i serwuje bezpieczne pliki. + Najgorszy scenariusz włamania to wandalizm treści: widoczny, z pełną + historią, odwracalny jednym revertem. W CMS-ie serwującym stronę ten sam + incydent oznacza przejętą stronę publiczną. +- **Zespół już utrzymuje Giteę.** Docelowo repozytorium treści może żyć na + istniejącej instancji zespołu — wtedy krańcowy koszt utrzymania jest + bliski zera, a logowanie załatwia jedna integracja z AAI. +- **Klasa oprogramowania.** Gitea to pojedynczy program w Go z SQLite: + aktualizacja to podmiana obrazu i restart, bez ekosystemu pluginów i bez + drzewa zależności npm po stronie serwera. Platformy CMS to frameworki + aplikacyjne z regularnymi migracjami głównych wersji. + +## Gdzie jeszcze może się przydać + +Ten sam wzorzec — edytor graficzny nad repozytorium Markdown — nie jest +ograniczony do portalu. Naturalni kandydaci u nas: + +- **Projekt Mickiewicza** — treści redagowane przez osoby nietechniczne, + a publikowane jako strona statyczna. +- **Dokumentacja Episodes Platform** — już dziś jest w Markdownie; podpięcie + edytora dałoby wygodną edycję w przeglądarce zamiast edytora plików + w Gitei, bez żadnych zmian w istniejącym repozytorium. + +Koszt wdrożenia w takich miejscach jest niewielki: edytor to jeden statyczny +plik HTML plus konfiguracja wskazująca repozytorium i strukturę treści. + +## Brak lock-inu + +Każdy element jest wymienialny osobno, bo treść to czysty Markdown: + +- **Sveltia ↔ Decap** — ten sam format konfiguracji; podmiana = jedna linijka + `