An anonymous reader said it out loud: "Alright, it's a simple website... can we see its sources though?"
I started going through the sources and parameterizing the secrets so that there weren't any hard-coded sensitive strings. It's a royal pain because the secrets then have to be injected via environment variables, which means reconfiguring the server on the host a...