The site: a static product page, built by OxygenFlow, pulled by its host (refs #1) d239f0850b00

// oxygenvcs.com's pipeline (OxygenFlow): every push builds the static

// site and keeps it as an artifact, with a signed provenance statement.

// Nothing deploys from here: the host serving the site pulls the newest

// passing build of main itself (deploy/pull.sh, oxygenvcs-web#1).

schema-version 1

// The OxygenFlow build image (oxygenflow/images/rust); the build needs

// only sh, awk and tar, which it has. No network.

sandbox "site" {

    runtime "microvm"

    rootfs "cas://blob/836461b613019f62399a960c61a25c482eb74e30054ff2cd44d5594c3305872b"

    memory-limit "1GiB"

    cpu-limit 1

    network "isolated"

}

job "site" {

    sandbox "site"

    exec "sh" "scripts/build.sh"

    output {

        artifact "site.tar.gz" {

            path "/src/site.tar.gz"

        }

    }

}

public/

site.tar.gz

# busybox httpd for oxygenvcs.com: the site's own 404 page, and types it

# serves (paths are relative to the live release).

E404:404.html

.html:text/html; charset=utf-8

.css:text/css; charset=utf-8

.svg:image/svg+xml

.png:image/png

.ico:image/x-icon

.txt:text/plain; charset=utf-8

# Pull the newest passing build of oxygenvcs-web's main and make it live.

[Unit]

Description=oxygenvcs.com: pull the newest passing build

[Service]

Type=oneshot

Environment=ROOT=%h/oxygenvcs

Environment="RELOAD=systemctl --user restart oxygenvcs-web.service"

ExecStart=%h/oxygenvcs/pull.sh

[Unit]

Description=oxygenvcs.com: look for a new build every two minutes

[Timer]

OnBootSec=1min

OnUnitActiveSec=2min

[Install]

WantedBy=timers.target

# The static server for oxygenvcs.com: busybox httpd on loopback, behind

# the Cloudflare tunnel. A user service (systemctl --user), with lingering.

[Unit]

Description=oxygenvcs.com static site (busybox httpd)

[Service]

ExecStart=/usr/bin/busybox httpd -f -p 127.0.0.1:7410 -h %h/oxygenvcs/current -c %h/oxygenvcs/httpd.conf

Restart=on-failure

[Install]

WantedBy=default.target

#!/bin/sh

# Pull the newest passing build of the site from OxygenHub and make it

# live (oxygenvcs-web#1). Run by a timer on the host that serves the site

# (Earth now, a VisionFive 2 Lite later); the host needs no inbound

# access and no credentials, since the repository is public.

#

# Each run: find the newest passing run of main, and if it is not the one

# live already, download its site.tar.gz, check it against the run's

# provenance statement (the artifact's SHA-256, this repository, main),

# unpack it into releases/RUN and point `current` at it in one rename.

# The last five releases stay for a rollback: `ln -sfn releases/N current`.

#

# Needs: sh, curl, python3 (reading JSON), sha256sum, tar.

set -eu

HUB=${HUB:-https://oxygenhub.io}

REPO=${REPO:-andymccall/oxygenvcs-web}

BOOKMARK=${BOOKMARK:-main}

ROOT=${ROOT:-/srv/oxygenvcs}

KEEP=${KEEP:-5}

# Run after a new release goes live: busybox httpd resolves its document

# root when it starts, so the service restarts it (see README.md).

RELOAD=${RELOAD:-}

mkdir -p "$ROOT/releases"

cd "$ROOT"

json() { python3 -I -c "import json,sys; $1" ; }

run=$(curl -fsS "$HUB/api/v1/repos/$REPO/flow/runs?limit=20" | json "

runs=[r for r in json.load(sys.stdin) if r['bookmark']=='$BOOKMARK' and r['status']=='passed']

print(runs[0]['number'] if runs else '')")

[ -n "$run" ] || { echo "no passing run of $BOOKMARK yet"; exit 0; }

live=$(readlink current 2>/dev/null | sed 's|releases/||' || true)

[ "$run" = "$live" ] && exit 0

art="$HUB/$REPO/flow/$run/artifacts/site/site.tar.gz"

tmp=$(mktemp -d "$ROOT/.pull.XXXXXX")

trap 'rm -rf "$tmp"' EXIT

curl -fsS "$art" -o "$tmp/site.tar.gz"

curl -fsS "$art/provenance" -o "$tmp/provenance.json"

got=$(sha256sum "$tmp/site.tar.gz" | cut -d' ' -f1)

# The statement must name this file's digest, this repository and the

# bookmark. (Its DSSE signature is the hub's; checking that here is for

# when oh can verify provenance offline.)

json "

import base64

env=json.load(open('$tmp/provenance.json'))

st=json.loads(base64.b64decode(env['payload']))

digests=[s['digest'].get('sha256') for s in st.get('subject',[])]

p=st['predicate']['buildDefinition']['externalParameters']

assert '$got' in digests, 'the artifact does not match its provenance'

assert p['repository']=='$HUB/$REPO', 'provenance names another repository: '+p['repository']

assert p['bookmark']=='$BOOKMARK', 'provenance names another bookmark: '+p['bookmark']

" <"$tmp/provenance.json"

mkdir "$tmp/site"

tar -C "$tmp/site" -xzf "$tmp/site.tar.gz"

[ -f "$tmp/site/index.html" ] || { echo "run $run: no index.html in the site"; exit 1; }

rm -rf "releases/$run"

mv "$tmp/site" "releases/$run"

ln -sfn "releases/$run" current.new

mv -T current.new current

echo "live: run $run ($got)"

[ -z "$RELOAD" ] || sh -c "$RELOAD"

# Keep the newest few.

ls -1 releases | sort -n | head -n -"$KEEP" | while read -r old; do rm -rf "releases/$old"; done

<footer class="site-foot">

  <div class="wrap foot-row">

    <div class="foot-brand">

      <img src="/assets/oxygen.svg" width="28" height="28" alt="">

      <span>Oxygen version control</span>

    </div>

    <nav aria-label="Elsewhere">

      <a href="https://oxygenhub.io">OxygenHub</a>

      <a href="https://oxygenhub.io/andymccall/oxygen">Source</a>

      <a href="https://oxygenhub.io/andymccall/oxygen/releases">Releases</a>

    </nav>

    <p class="fine">This site is static: no scripts, no cookies, no trackers, no third-party requests. Built by OxygenFlow from <a href="https://oxygenhub.io/andymccall/oxygenvcs-web">its repository</a>.</p>

  </div>

</footer>

<a class="skip" href="#main">Skip to content</a>

<header class="site-head">

  <div class="wrap head-row">

    <a class="brand" href="/" aria-label="Oxygen, home">

      <img src="/assets/oxygen.svg" width="36" height="36" alt="">

      <span>Oxygen</span>

    </a>

    <nav aria-label="Site">

      <a href="/#oxygen">Oxygen</a>

      <a href="/#hub">OxygenHub</a>

      <a href="/#flow">OxygenFlow</a>

      <a href="/#sovereign">Sovereign</a>

      <a class="nav-cta" href="https://oxygenhub.io">Try OxygenHub</a>

    </nav>

  </div>

</header>

#!/bin/sh

# Build the site into public/ and pack it as site.tar.gz: each page in

# src/ has its `<!-- include header -->` and `<!-- include footer -->`

# lines replaced by partials/header.html and partials/footer.html;

# everything else in src/ is copied as it is. Plain sh, awk and tar, so

# it runs in any image (and on the VisionFive 2 Lite) with nothing to

# install.

set -eu

cd "$(dirname "$0")/.."

rm -rf public

mkdir -p public

(cd src && find . -type f) | while read -r f; do

    mkdir -p "public/$(dirname "$f")"

    case "$f" in

        *.html)

            awk '

                /<!-- include header -->/ { while ((getline l < "partials/header.html") > 0) print l; close("partials/header.html"); next }

                /<!-- include footer -->/ { while ((getline l < "partials/footer.html") > 0) print l; close("partials/footer.html"); next }

                { print }

            ' "src/$f" > "public/$f"

            if grep -q '<!-- include ' "public/$f"; then

                echo "build: $f names a partial that does not exist" >&2

                exit 1

            fi

            ;;

        *) cp "src/$f" "public/$f" ;;

    esac

done

# Nothing in the site may load from elsewhere (the footer promises it).

# Links out are fine; nothing a page loads (src=, <link href=) may be.

if grep -rniE 'src="(https?:)?//|<link[^>]*href="(https?:)?//' public --include='*.html'; then

    echo "build: a page loads a resource from another site (above)" >&2

    exit 1

fi

if grep -rniE 'url\((https?:)?//|@import' public --include='*.css'; then

    echo "build: the stylesheet loads something from another site (above)" >&2

    exit 1

fi

tar -C public -czf site.tar.gz .

echo "built $(find public -type f | wc -l) files into public/ and site.tar.gz"

<!doctype html>

<html lang="en-GB">

<head>

<meta charset="utf-8">

<meta name="viewport" content="width=device-width, initial-scale=1">

<title>Not found · Oxygen</title>

<link rel="icon" href="/assets/oxygen.svg" type="image/svg+xml">

<link rel="stylesheet" href="/assets/site.css">

</head>

<body>

<!-- include header -->

<main id="main">

<section class="hero short">

  <div class="wrap">

    <p class="eyebrow">404</p>

    <h1>Nothing here.</h1>

    <p class="lede">That page does not exist. The <a href="/">home page</a> has everything this site holds; the documentation will live at docs.oxygenvcs.com.</p>

  </div>

</section>

</main>

<!-- include footer -->

</body>

</html>

<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" width="100%" height="100%">

  <defs>

    <linearGradient id="oxyGrad" gradientUnits="userSpaceOnUse" x1="-22" y1="-11" x2="22" y2="11">

      <stop offset="0%" stop-color="#00F0FF" />

      <stop offset="100%" stop-color="#0072FF" />

    </linearGradient>

    <g id="oxy-mark-mini">

      <path d="M -11 -6 L 11 -6" stroke="url(#oxyGrad)" stroke-width="3" stroke-linecap="round" />

      <path d="M -11 6 L 11 6" stroke="url(#oxyGrad)" stroke-width="3" stroke-linecap="round" />

      <circle cx="-11" cy="0" r="10" fill="none" stroke="url(#oxyGrad)" stroke-width="3" />

      <circle cx="-11" cy="0" r="3.5" fill="#00F0FF" />

      <circle cx="11" cy="0" r="10" fill="none" stroke="url(#oxyGrad)" stroke-width="3" />

      <circle cx="11" cy="0" r="3.5" fill="#FFFFFF" />

    </g>

  </defs>

  <rect width="64" height="64" rx="14" fill="#070c18" />

  <use href="#oxy-mark-mini" x="32" y="32" />

</svg>

/* oxygenvcs.com: one stylesheet, the Oxygen palette (the mark's cyan to

   blue on near-black), system fonts only, no external requests. Dark by

   default, light when the visitor's system asks for it. */

:root {

  --bg: #070c18;

  --bg-2: #0c1426;

  --panel: #101a30;

  --line: #1f2c47;

  --ink: #e6edf7;

  --mute: #93a1b8;

  --cyan: #00f0ff;

  --blue: #0072ff;

  --link: #5cd6ff;

  --accent: #00f0ff;

  --grad: linear-gradient(90deg, var(--cyan), var(--blue));

  --radius: 14px;

  --wrap: 1120px;

  color-scheme: dark;

}

@media (prefers-color-scheme: light) {

  :root {

    --bg: #f6f8fc;

    --bg-2: #ffffff;

    --panel: #ffffff;

    --line: #dbe3ef;

    --ink: #0b1324;

    --mute: #5a6880;

    --link: #0059d6;

    --accent: #0062d6;

    color-scheme: light;

  }

}

*, *::before, *::after { box-sizing: border-box; }

html { -webkit-text-size-adjust: 100%; }

body {

  margin: 0;

  background: var(--bg);

  color: var(--ink);

  font: 17px/1.6 system-ui, -apple-system, "Segoe UI", Roboto, Ubuntu, "Helvetica Neue", Arial, sans-serif;

}

a { color: var(--link); text-underline-offset: 3px; }

a:hover { text-decoration-thickness: 2px; }

code, pre { font-family: ui-monospace, "SF Mono", "Cascadia Code", "DejaVu Sans Mono", Menlo, monospace; }

img { max-width: 100%; }

.wrap {

  max-width: var(--wrap);

  margin: 0 auto;

  padding-left: max(20px, env(safe-area-inset-left, 0px));

  padding-right: max(20px, env(safe-area-inset-right, 0px));

}

.skip { position: absolute; left: -999px; }

.skip:focus { left: 12px; top: 12px; z-index: 10; background: var(--panel); padding: 8px 12px; border-radius: 8px; }

/* Header */

.site-head { border-bottom: 1px solid var(--line); background: color-mix(in srgb, var(--bg) 88%, transparent); position: sticky; top: 0; z-index: 5; backdrop-filter: blur(8px); }

.head-row { display: flex; align-items: center; justify-content: space-between; gap: 16px; min-height: 64px; flex-wrap: wrap; }

.brand { display: flex; align-items: center; gap: 10px; color: var(--ink); text-decoration: none; font-weight: 700; font-size: 20px; letter-spacing: .2px; }

.brand img { border-radius: 9px; }

.site-head nav { display: flex; align-items: center; gap: 4px 18px; flex-wrap: wrap; }

.site-head nav a { color: var(--mute); text-decoration: none; font-size: 15px; font-weight: 500; }

.site-head nav a:hover { color: var(--ink); }

.site-head nav a.nav-cta { color: var(--ink); border: 1px solid var(--line); padding: 6px 12px; border-radius: 999px; }

.site-head nav a.nav-cta:hover { border-color: var(--cyan); }

/* Sections */

section { padding-block: 72px; }

section + section { border-top: 1px solid var(--line); }

h1, h2, h3 { line-height: 1.15; text-wrap: balance; margin: 0 0 16px; }

h1 { font-size: clamp(40px, 6vw, 68px); letter-spacing: -1px; }

h2 { font-size: clamp(28px, 3.4vw, 38px); letter-spacing: -.4px; }

h3 { font-size: 20px; }

p { max-width: 68ch; margin: 0 0 16px; }

.eyebrow { text-transform: uppercase; letter-spacing: .14em; font-size: 13px; font-weight: 600; color: var(--accent); margin-bottom: 18px; }

.lede { font-size: clamp(18px, 2vw, 21px); color: var(--mute); }

.grad { background: var(--grad); -webkit-background-clip: text; background-clip: text; color: transparent; }

.hero { padding-block: 96px 80px; background: radial-gradient(900px 420px at 80% -10%, color-mix(in srgb, var(--blue) 22%, transparent), transparent 70%), radial-gradient(700px 360px at 0% 0%, color-mix(in srgb, var(--cyan) 12%, transparent), transparent 70%); }

.hero.short { padding-block: 120px; }

.ctas { display: flex; gap: 12px; flex-wrap: wrap; margin: 28px 0 40px; }

.btn { display: inline-block; padding: 12px 20px; border-radius: 10px; border: 1px solid var(--line); color: var(--ink); text-decoration: none; font-weight: 600; }

.btn:hover { border-color: var(--cyan); }

.btn.primary { background: var(--grad); border-color: transparent; color: #04101f; }

.btn.primary:hover { filter: brightness(1.08); }

.term { max-width: 640px; margin: 0; padding: 18px 20px; background: #050913; color: #d7e3f4; border: 1px solid #1a2742; border-radius: var(--radius); font-size: 14.5px; line-height: 1.7; overflow-x: auto; }

.term .p { color: #5f7392; user-select: none; }

.term .ok { color: var(--cyan); }

/* Cards */

.cards { display: grid; grid-template-columns: repeat(auto-fit, minmax(290px, 1fr)); gap: 20px; margin-top: 32px; }

.card { min-width: 0; background: var(--panel); border: 1px solid var(--line); border-radius: var(--radius); padding: 26px; }

.card h3 { display: flex; align-items: center; gap: 10px; }

.card p { color: var(--mute); }

.card ul { margin: 0; padding-left: 20px; display: grid; gap: 8px; }

.card li { color: var(--ink); font-size: 16px; }

.card.flat p { margin: 0; }

.tag { font: 600 13px/1 ui-monospace, Menlo, monospace; padding: 5px 8px; border-radius: 6px; background: color-mix(in srgb, var(--accent) 14%, transparent); color: var(--accent); }

/* Why */

.two { display: grid; grid-template-columns: 1.3fr 1fr; gap: 48px; align-items: start; }

.two > * { min-width: 0; }

.facts { margin: 0; display: grid; gap: 12px; }

.facts div { border-left: 3px solid; border-image: var(--grad) 1; padding: 6px 0 6px 16px; }

.facts dt { font-weight: 700; }

.facts dd { margin: 2px 0 0; color: var(--mute); }

.status p { color: var(--mute); }

.status code { color: var(--ink); }

/* Footer */

.site-foot { border-top: 1px solid var(--line); padding-block: 36px 48px; background: var(--bg-2); }

.foot-row { display: grid; gap: 14px; }

.foot-brand { display: flex; align-items: center; gap: 10px; font-weight: 600; }

.foot-brand img { border-radius: 7px; }

.site-foot nav { display: flex; gap: 18px; flex-wrap: wrap; }

.site-foot .fine { font-size: 14px; color: var(--mute); margin: 0; }

@media (max-width: 760px) {

  section { padding-block: 52px; }

  .hero { padding-block: 64px 56px; }

  .two { grid-template-columns: 1fr; gap: 28px; }

  .site-head { position: static; }

}

<!doctype html>

<html lang="en-GB">

<head>

<meta charset="utf-8">

<meta name="viewport" content="width=device-width, initial-scale=1">

<title>Oxygen: version control you can verify</title>

<meta name="description" content="Oxygen is a version control system, a forge and a build runner designed together: every change signed, conflicts recorded and resolved once, builds reproducible, and all of it hosted where you choose.">

<link rel="icon" href="/assets/oxygen.svg" type="image/svg+xml">

<link rel="stylesheet" href="/assets/site.css">

</head>

<body>

<!-- include header -->

<main id="main">

<section class="hero">

  <div class="wrap">

    <p class="eyebrow">Version control, a forge and CI, designed together</p>

    <h1>Version control you can <span class="grad">verify</span>.</h1>

    <p class="lede">Oxygen records every change as a signed, commutative patch, keeps conflicts as part of history instead of a mess to clean up, and builds in sandboxes that leave a signed receipt. It runs on your own machines, in your own country, and proves what it did.</p>

    <div class="ctas">

      <a class="btn primary" href="https://oxygenhub.io">Explore OxygenHub</a>

      <a class="btn" href="https://oxygenhub.io/andymccall/oxygen/releases">Get oxy</a>

    </div>

    <pre class="term" aria-label="An example session"><code><span class="p">$</span> oxy clone https://oxygenhub.io/andymccall/oxygen

<span class="p">$</span> oxy commit -m "Retry the upload"

<span class="p">$</span> oxy push

<span class="ok">✔</span> Pushed origin/main · sealed by your key · logged</code></pre>

  </div>

</section>

<section class="pillars" id="oxygen">

  <div class="wrap">

    <h2>Three parts, one system</h2>

    <div class="cards">

      <article class="card">

        <h3><span class="tag">oxy</span> Oxygen</h3>

        <p>The version control system. Changes commute, so they apply in any order and reach the same result: no rebasing, and a proposal never goes stale.</p>

        <ul>

          <li>Conflicts are recorded in history and resolved once, by a change anyone can fetch.</li>

          <li>Every change is signed, with Ed25519 and the post-quantum ML-DSA-65 together.</li>

          <li>Imports and exports Git history, commit by commit.</li>

          <li>Keeps repositories on disk or in your own S3 or Google Cloud Storage buckets.</li>

        </ul>

      </article>

      <article class="card" id="hub">

        <h3><span class="tag">oh</span> OxygenHub</h3>

        <p>The forge, self-hosted or at <a href="https://oxygenhub.io">oxygenhub.io</a>: repositories, proposals and reviews, issues and boards, releases.</p>

        <ul>

          <li>Approvals are sealed with the reviewer's key, so a landing proves who agreed.</li>

          <li>Every reference update goes into a transparency log, cosigned by independent witnesses.</li>

          <li>Agents work under grants you can revoke, signing with ten-minute keys, never stored ones.</li>

          <li>A command line, Visual Studio Code extensions and an Android app.</li>

        </ul>

      </article>

      <article class="card" id="flow">

        <h3><span class="tag">flow</span> OxygenFlow</h3>

        <p>The pipeline runner. Jobs run with no network unless they name the hosts they need, from images pinned by hash.</p>

        <ul>

          <li>Three sandboxes: Firecracker microVMs, system-call filtering, and WebAssembly.</li>

          <li>Runners on Linux (x86_64, Arm and RISC-V), Windows, and Android phones.</li>

          <li>Each job leaves a signed receipt naming its inputs, image and outputs.</li>

          <li>Runners update themselves, in test groups first, and roll back on their own.</li>

        </ul>

      </article>

    </div>

  </div>

</section>

<section class="why">

  <div class="wrap two">

    <div>

      <h2>Why another version control system?</h2>

      <p>Git records snapshots and leaves merging to tools and people. Every rebase rewrites history, every conflict is solved again on the next merge, and nothing proves who wrote what unless everyone signs everything by hand.</p>

      <p>Oxygen starts from the other end. A change is a patch with a stable identity, so applying it twice or in another order changes nothing. History is never rewritten. Signing is the default, checked on every push, and recorded where anyone can audit it.</p>

    </div>

    <dl class="facts">

      <div><dt>Commutative</dt><dd>Changes apply in any order; proposals never go stale.</dd></div>

      <div><dt>Conflicts kept</dt><dd>Recorded, built on, resolved once for everyone.</dd></div>

      <div><dt>Signed</dt><dd>Classical and post-quantum signatures on every change.</dd></div>

      <div><dt>Logged</dt><dd>A witnessed transparency log of every update.</dd></div>

      <div><dt>Hermetic</dt><dd>Builds with no network, from pinned images.</dd></div>

    </dl>

  </div>

</section>

<section class="sovereign" id="sovereign">

  <div class="wrap">

    <h2>Sovereign by design</h2>

    <p class="lede">Your source, your keys, your builds, in your jurisdiction. Oxygen has no service it must call home to.</p>

    <div class="cards three">

      <div class="card flat">

        <h3>Host it where you must</h3>

        <p>Run OxygenHub and its runners on your own hardware or cloud account, in the UK or wherever your data has to stay. Storage can be your own buckets.</p>

      </div>

      <div class="card flat">

        <h3>Prove what happened</h3>

        <p>Signed changes, sealed approvals, build receipts and a witnessed log let an auditor check the history without trusting the server that holds it.</p>

      </div>

      <div class="card flat">

        <h3>Keep builds in</h3>

        <p>Jobs reach the network only through hosts you allow, every decision logged, so a build cannot quietly fetch or send what it should not.</p>

      </div>

    </div>

  </div>

</section>

<section class="status">

  <div class="wrap">

    <h2>Where it is today</h2>

    <p>Oxygen is young and moving fast, ahead of a 1.0 release. It is built with itself: its source lives on OxygenHub, every push is tested by OxygenFlow on our own runners, and every release is signed and logged. Try it at <a href="https://oxygenhub.io">oxygenhub.io</a>, or install <code>oxy</code> and <code>oh</code> from the <a href="https://oxygenhub.io/andymccall/oxygen/releases">releases page</a> or the apt repository there.</p>

  </div>

</section>

</main>

<!-- include footer -->

</body>

</html>

# oxygenvcs.com

The product site for Oxygen, OxygenHub and OxygenFlow. User documentation

lives separately, at docs.oxygenvcs.com.

Static on purpose: hand-written HTML and one stylesheet, no JavaScript, no

cookies, no third-party fonts or requests. Less to maintain, little to

attack.

## Layout

- `src/`: the pages and `assets/`. A page's `<!-- include header -->` and

  `<!-- include footer -->` lines are replaced by `partials/`.

- `scripts/build.sh`: builds `public/` and `site.tar.gz` with sh, awk and

  tar, and refuses a page or stylesheet that loads anything from another

  site.

- `.flow/pipeline.kdl`: OxygenFlow runs the build on every push and keeps

  `site.tar.gz` as an artifact with a signed provenance statement.

- `deploy/`: how a host serves it.

Preview locally: `sh scripts/build.sh && python3 -m http.server -d public 8000`.

## Deploying (pull, not push)

Nothing pushes to the server. A timer on the host runs `deploy/pull.sh`:

it finds the newest passing run of `main`, downloads its `site.tar.gz`,

checks it against the run's provenance (the file's SHA-256, this

repository, `main`), unpacks it into `releases/RUN` and points `current`

at it. The host needs no inbound access and no credentials. The last five

releases stay: roll back with `ln -sfn releases/N current` and restart

the server.

On Earth (user services of `claude`, with lingering), serving

127.0.0.1:7410 behind the Cloudflare tunnel:

```

mkdir -p ~/oxygenvcs ~/.config/systemd/user

cp deploy/pull.sh deploy/httpd.conf ~/oxygenvcs/

cp deploy/oxygenvcs-*.service deploy/oxygenvcs-pull.timer ~/.config/systemd/user/

systemctl --user daemon-reload

systemctl --user start oxygenvcs-pull.service        # first release

systemctl --user enable --now oxygenvcs-web.service oxygenvcs-pull.timer

```

The VisionFive 2 Lite (riscv64) later: the same, with busybox, curl and

python3 installed. The tunnel's route for oxygenvcs.com (and .net, .org,

.co.uk redirecting to it) points at the server's port.