v1.1.2

Website security hardening

The website now sends a full set of security headers, aiming for an A+ on securityheaders.com and the Mozilla Observatory.

What's new

• Strict Content Security Policy. The page loads scripts, styles and images only from its own origin. It allows no inline code, cannot be framed, and blocks form submissions and <base> overrides.
• HSTS with a 2-year max-age, so browsers always use HTTPS.
• Extra hardening headers: X-Content-Type-Options: nosniff, X-Frame-Options: DENY, Referrer-Policy: strict-origin-when-cross-origin, a restrictive Permissions-Policy, and same-origin Cross-Origin-Opener-Policy and Cross-Origin-Resource-Policy.
• Server tidy-up: UTF-8 charset on the HTML, CSS and JS, directory listing disabled, and the server signature hidden.

Changes under the hood

• The inline CSS and JavaScript have moved to Website/style.css and Website/app.js.
• Inline onclick and style attributes are gone. Event listeners and swatch colours are now set up in app.js.
• The page should look and behave exactly as before.

Upgrading / self-hosting

• Deploy all of Website/: index.html, style.css, app.js and .htaccess.
• Apache needs mod_headers enabled. Without it, the headers are skipped without any error.
• If you're behind Cloudflare, purge the cache after deploying.
• HSTS applies to the main hostname only. Add includeSubDomains; preload only if every web-facing subdomain already works over HTTPS.

v1.1.1

v1.1.1 – Host update & backend privacy

Changed

• Roulette wheel now points to roulette.c.telnet.me.uk:21596 (was roulette.g.lp0.uk:21596).

Fixed

• The roulette server no longer reveals the backend's internal host/port to clients — the "You landed on" message and the backend-unavailable error now show only the stream name.

v1.0.0

v1.0.0 – Initial release

The first full release of telnet.me.uk: stream any video as coloured ASCII/ANSI art over telnet or netcat, plus a roulette wheel that drops viewers into one of several streams at random.

Added

• ASCII-Telnet video streamer (asciivid.py) — renders a video to a compact .dat frame cache with ffmpeg and serves it over a plain TCP socket for viewing via telnet/nc.
• systemd tooling for running many streams at once — asciivid-add, asciivid-ls, asciivid-rm, an asciivid@.service template, and install-service.sh for one-time setup, so each video can run as its own named, independently managed instance on its own port.
• Roulette telnet server (roulette_server.py) — animates a spinning wheel in the client's terminal, picks a random backend, then transparently bridges the client to that backend stream.
• systemd service for the roulette server (roulette.service) for always-on deployment.
• Website (Website/index.html) with HTTPS redirection via .htaccess.
• Documentation — full README covering requirements, quick start, the CLI (render/serve/play), running as a service, the roulette server's backends/configuration, networking/exposure notes, and troubleshooting.
• GNU General Public License v3.

Changed

• Website GUI refined across two follow-up passes (layout and styling improvements).
• Roulette spin animation reworked: rotation count, deceleration length, and delay are now randomized per spin (previously fixed), and spin duration no longer balloons as the backend list grows — kept to roughly 2–3 seconds regardless of list size.