This renders all requests for that user's posts, collections and related
ActivityPub endpoints with 404 responses.

While suspended, users may not create or edit posts or collections.

User status is listed in the admin user page

Admin view of user details shows status and now has a button to activate
or suspend a user.

fix tar bombs

Emit the server software and version to the log on startup

instead of writefreely_versionstring

this changes the release targets in the Makefile to use a subdirectory
of the format BINARYNAME_GITREV so extracting the archive results in a
single directory.

Add editor config option

Support toning down WriteFreely promotion

Resolves T676

Support setting default blog visibility on instance

Resolves T675

(in returned JSON data)

Ref T675

instead of updating it later. This is more correct behavior, prevents an
additional query, and ensures that potential collection-creation when
claiming posts also respects the default (which it didn't before).

Ref T675

instead of App

Ref T675

Fix single-user instance issues

Previously, the URL of the dynamically-added pinned post on a
single-user instance would include the username, causing the link to go
to a non-existent page. This fixes that.

Fix missing hostname when publishing via API

Style collection 404 page like rest of blog

Resolves T493

Ref T493

Ref T493

Let Apper set request log format

Ref T677

Ref T677

Support <audio> element

Automatic certificates from Let's Encrypt

Resolves T542

Fix go-sitemap-generator overriding GOMAXPROCs

This adds a new ReqLog() func to the Apper interface that'll return the
log message for incoming requests.

Ref T649

changed to use stm.URL for imgs for readability
fixed error in append statement
reordered import statements

This adds a new `wf_modesty` config option that removes the copious
mentions of WriteFreely in places like the About page and site
footers.

WriteFreely remains boastful and bumptious by default; but enabling
the modesty option will tone it down and likely lead to less confusion
among average users.

Ref T676

Ref T675

This adds a new `default_visibility` config value that lets an instance
admin set the visibility of newly created collections.

Ref T675

This whitelists the HTML5 <audio> element and adds some basic style to
make it look nice.

- This removes copy mentioning the Blogs page, which isn't used on
  single-user instances
- This fixes the "Start writing" link, which on a single-user instance
  would've gone to the blog index, rather than the editor

Previously, these links showed up on user backend pages on a single-user
instance, despite them not working / only being applicable on multi-user
instances.

This is the crucial part where the hostName is needed for federation and
API clients. This change at least lets us know when we mess up like this
so the issue is easier to catch in the future.

This fixes a bug that occurred only when publishing via API and
authenticating via token (rather than cookie).

Previously, the instance's hostname wouldn't be added to the Collection
that got passed around after retrieving the owned post, meaning an
incomplete URL was returned in the API response, and federation failed due
to the missing host.

This displays the "page is missing" text within the same page as any
other blog post, keeping customizations, pinned pages, and general blog
navigation.

Ref T493

Don't consider post unpublished when title exists

This adds a new "Secure (port 443), auto certificate" option to the "Web
server mode" prompt when running `writefreely --config`. When chosen,
it'll set `autocert` to `true` and set the path for certs and keys to
`certs`.

Ref T542

This fixes certificate validation, while keeping HTTP -> HTTPS
redirection.

Ref T542

Previously, this would pass in the instance's full (and invalid) URL.
Now it passes only the host name.

Ref T542

This adds a new config option in the `[server]` section: `autocert`.
When true, WF will automatically generate certificates instead of using
ones from the provided cert path. However, all generated certificates
will be stored in the configured `tls_cert_path`.

Ref T542

This upgrades the library to v2, which lets you specify that GOMAXPROCs
should always be the max number of CPUs -- and then sets it to that.

One side effect of this is that images are no longer listed in sitemaps.
I'm somehow at a loss on how to build and append the images array we
need, with the library's latest changes.

Fixes #86

Prevent transliterated slugs exceeding length limit

Previously, you could create a post with a title but no body, e.g. by
publishing via email. This would still show the post on a blog, but
would give a 410 Gone page when trying to access the page.

This issue originally reported on the forum:
https://discuss.write.as/t/removing-post-unpublished-by-author-post/725

Transliteration during slug generation can cause slugs to exceed their
80-character limit. This fixes that by making a second truncation pass
on the slug during generation.

Originally reported on the forum:
https://discuss.write.as/t/title-convert-to-url-function-bug-under-chinese/723