export default { async fetch(request, env, ctx) { // Basic route normalization (optional: redirect www → apex) const url = new URL(request.url); if (url.hostname.startsWith('www.')) { url.hostname = url.hostname.replace(/^www\./, ''); return Response.redirect(url.toString(), 301); } const html = `

👋 Hi, you’re early.

Come back in 2 dog weeks — I’ll be up and running! Or if zhas signs on lol

`; // Security + caching headers const headers = { "content-type": "text/html; charset=UTF-8", "cache-control": "no-store", "x-content-type-options": "nosniff", "x-frame-options": "DENY", "referrer-policy": "no-referrer", "permissions-policy": "camera=(), microphone=(), geolocation=()", // Basic CSP suitable for this simple static page "content-security-policy": "default-src 'none'; style-src 'unsafe-inline'; img-src 'self' data:; font-src 'self'; form-action 'none'; base-uri 'none'; frame-ancestors 'none'" }; return new Response(html, { status: 200, headers }); } };