From b4c52ee98ded691c6fea442a0dc208d0a91d8baf Mon Sep 17 00:00:00 2001
From: andwati <andwatiian@gmail.com>
Date: Thu, 16 Jul 2026 16:09:20 +0300
Subject: [PATCH] added pgp keys

---
 content/about.md                | 25 +++++++++++++++++++++++++
 static/.well-known/pgp-key.txt  | 13 +++++++++++++
 static/.well-known/security.txt | 13 +++++++++++++
 wrangler.toml                   | 15 +++++++++++++++
 4 files changed, 66 insertions(+)
 create mode 100644 static/.well-known/pgp-key.txt

diff --git a/content/about.md b/content/about.md
index 3e264e0..e8518b4 100644
--- a/content/about.md
+++ b/content/about.md
@@ -4,3 +4,28 @@ template = "page.html"
 +++
 
 spend my free time working on hobby projects and sometimes I write about my experiences. In particular, I enjoy learning about offensive security and reverse engineering.
+
+## PGP
+
+For anything sensitive, you can reach me encrypted.
+
+```txt
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=uKsS
+-----END PGP PUBLIC KEY BLOCK-----
+```
+
+- Fingerprint: `AD58 AAB7 A20D 8523 CBF5  9A79 1F20 FED0 AA05 B0DA`
+- Public key: [/.well-known/pgp-key.txt](/.well-known/pgp-key.txt)
+- Also on: [keys.openpgp.org](https://keys.openpgp.org/search?q=AD58AAB7A20D8523CBF59A791F20FED0AA05B0DA) and [keyserver.ubuntu.com](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xAD58AAB7A20D8523CBF59A791F20FED0AA05B0DA)
+- Also see: [/.well-known/security.txt](/.well-known/security.txt) (signed)
diff --git a/static/.well-known/pgp-key.txt b/static/.well-known/pgp-key.txt
new file mode 100644
index 0000000..ea35ba1
--- /dev/null
+++ b/static/.well-known/pgp-key.txt
@@ -0,0 +1,13 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=uKsS
+-----END PGP PUBLIC KEY BLOCK-----
diff --git a/static/.well-known/security.txt b/static/.well-known/security.txt
index 430566d..5232162 100644
--- a/static/.well-known/security.txt
+++ b/static/.well-known/security.txt
@@ -1,4 +1,17 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA512
+
 Contact: mailto:andwatiian@gmail.com
 Expires: 2027-07-16T00:00:00.000Z
+Encryption: https://andwati.com/.well-known/pgp-key.txt
+Encryption: https://keys.openpgp.org/vks/v1/by-fingerprint/AD58AAB7A20D8523CBF59A791F20FED0AA05B0DA
+Encryption: https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xAD58AAB7A20D8523CBF59A791F20FED0AA05B0DA
 Preferred-Languages: en
 Canonical: https://andwati.com/.well-known/security.txt
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYKAB0WIQStWKq3og2FI8v1mnkfIP7QqgWw2gUCaljXlQAKCRAfIP7QqgWw
+2qAoAP0Q7Cc0YsP2dvV7fqDlqcnjuJepQQSTZBz7ehkPyjGV5gEA3K9ZqQmuI2ea
+KKADWxuKTTY43PBmuV9rMqLm8ZOPlAY=
+=NUkY
+-----END PGP SIGNATURE-----
diff --git a/wrangler.toml b/wrangler.toml
index 7c4050d..a1dbf80 100644
--- a/wrangler.toml
+++ b/wrangler.toml
@@ -12,3 +12,18 @@ custom_domain = true
 [[routes]]
 pattern = "www.andwati.com"
 custom_domain = true
+
+[observability]
+enabled = false
+head_sampling_rate = 1
+
+[observability.logs]
+enabled = true
+head_sampling_rate = 1
+persist = true
+invocation_logs = true
+
+[observability.traces]
+enabled = false
+persist = true
+head_sampling_rate = 1