[docs] Don't use third-party fonts from fonts.googleapis.com on ddev.readthedocs.io

[gitressa]

Is there an existing issue for this?

• I have searched the existing issues

Problem

Respecting user privacy have been getting a lot of well deserved attention during the last few years. It is recommended to not use third-party fonts, to respect user privacy, and not hand over personal data to third-parties.

Steps To Reproduce

1. Visit https://ddev.readthedocs.io/
2. Open uBlock Origin
3. See that the third-party font provider fonts.googleapis.com is used

Solution

• Check if the Privacy plugin (The heart icon = "Sponsors only") has been released, after reaching the target of $14,000
• Enable the Privacy plugin, and embed fonts in the theme, phasing out third-party fonts, respecting user privacy

[rfay]

Moved to ddev.com-front-end

[mattstein]

@rfay I’m confused—why move this to the ddev.com project when it’s specifically about the docs?

[rfay]

Just pretty confused I guess! Not thinking. I'll move it back. But I have no idea how we'd be using fonts unless it's an artifact of readthedocs?

[rfay]

@gitressa would you mind poking around to figure out how the fonts are being pulled in?

[gitressa]

Sure @rfay, I found this:

squidfunk commented Nov 12, 2022

If you're a user of Material for MkDocs, enabling the built-in privacy plugin will automatically download and replace all external assets that are found in the resulting HTML with local versions. This means that mkdocs/mkdocs#2171 (comment) is also solved, since all external files found in the HTML are handled - no additional vendoring necessary.

This is the Material for MkDocs setting: Built-in privacy plugin.

I see mkdocs-material>=9 in https://github.com/alexbogias/ddev/blob/master/docs/mkdocs-pip-requirements, so maybe possible?

[rfay]

Want to try a PR?

[gitressa]

Great that you're open for this @rfay. I don't have time to look at it right now, but anyone else should feel free to create a PR in the meantime.

[rfay]

OK @gitressa please reopen when you have time to look into it, thanks!

[gitressa]

I finally took stab at this @rfay. It ought to be as easy as adding two lines, which should install the privacy plug-in.

The privacy plugin is built into Material for MkDocs and doesn't need to be installed.

https://squidfunk.github.io/mkdocs-material/plugins/privacy/#configuration

The test fails, though:

ERROR   -  Config value 'plugins': The "privacy" plugin is not installed

Aborted with 1 configuration errors!i

But ... you need to be a sponsor for this feature: https://squidfunk.github.io/mkdocs-material/insiders/

It's the heart icon, right below the title, which I understood after I found this: squidfunk/mkdocs-material#5317 (comment)

[rfay]

Ah. We did sponsor and use the insiders version for a while, but it meant that ordinary users couldn't build the docs, so stopped, and went with the full open-source.

[rfay]

We'd be happy to sponsor, but can't use something that requires one person's ssh key to be able to do a build.

[gitressa]

Thanks for clarifying @rfay. The next step in their fund raising is $14,000 – Goat's Horn where Privacy plugin will become available for everyone.

Current funding is close at $13,860 a month, so perhaps DDEV could consider becoming a sponsor again?

[rfay]

I need to review our upstream contributions, so will remember this. We can sponsor without using their too-hard-to-manage private build setup. Thanks!

[gitressa]

Sounds great, funding open source projects is important, as we all know :-)

[rfay]

DDEV is once again a sponsor of mkdocs-material

[gitressa]

Great, thanks @rfay! If the key thing is still a problem, and since I don't know the details, would you consider creating an issue about it at https://github.com/squidfunk/mkdocs-material/issues?

It might also help other projects to get this sorted out.

[rfay]

The issue was discussed in

• Improve Insiders workflow squidfunk/mkdocs-material#4104

[gitressa]

Thanks, I have subscribed to that issue, and hope Insiders' workflow will be improved, or the goal of 14,000 reached, whatever comes first.

[gitressa]

I just checked, and the current funding is $14,720 a month (congratulations!) which should mean that the Built-in privacy plugin is now available to be enabled.

... those features were part of Insiders, but are now generally available and can be used by all users.

https://squidfunk.github.io/mkdocs-material/insiders/#14000-goats-horn

[rfay]

A PR is welcome!

[gitressa]

Sure! It's here, and just need reopening: #5463.