# Infrastructure

Page: Info
Canonical: https://banes-lab.com/info#infrastructure

### Architecture

**Edge**

NGINX terminates TLS and serves files straight from disk

**No Backend**

There is no application server, database, or runtime process behind the edge; every page is pre-rendered at build time

**Header Stripping**

The Server header and every version identifier are removed from responses

**Static Delivery**

Pre-rendered HTML pages plus content-hashed CSS/JS served with long-term caching

**Machine-Readable Content**

Each page and tab is also published as a JSON payload under /json/ and as a Markdown twin at its own path with a .md suffix (or by requesting the page with an Accept header of text/markdown), readable from any origin; both carry only the same public content as the page

**Published Source**

The Anatomy page publishes the site's own client source: each file's text is served as a static file under /assets/sources/ and its syntax walk under /assets/walks/, derived from the same build that produced the page

### Network

**Firewall**

Host-based firewall restricts access to essential ports

**Port Exposure**

Only HTTPS (443) and HTTP (80, redirect only) exposed

**Canonical Host**

Plain HTTP and the www subdomain permanently redirect to https://banes-lab.com

**Mail Transport**

Mail for this domain is handled by its registrar's forwarding servers; a published MTA-STS policy in enforce mode requires sending servers to deliver over TLS with a matching certificate, and a TLS reporting record asks them to report any failure to do so