Web & productDE-106
Security-first relaunch of a brand website
Outcome Launched clean on every filtering DNS resolver; indexing started two days after the sitemap fix.
After the previous domain was blocklisted, the brand needed a new site that could not fail the same way. A colleague wrote the page code; I owned the rules, the pipeline and the launch.
Acceptance criteriaall 4/4 met
- Set the build rules: nothing reused, no third-party scripts or fonts, a strict Content Security Policy. Reviewed every preview before it shipped.
- Built the delivery pipeline: two-stage CI that keeps deploy secrets away from the build, pinned actions, FTPS, a pre-deploy guard and a daily outside monitor.
- Set up DNS, DNSSEC, HSTS, and SPF, DKIM and DMARC.
- Fixed slow indexing with sitemap dates taken from git history: all 20 URLs were discovered and indexing started within two days.
- Status
- Live
- Lane
- Web & product
- Timeline
- Sept 2026 to Oct 2026
- Stack
- Astro
- Tailwind CSS
- GitHub Actions
- Cloudflare
- Search Console