diff --git a/.gitignore b/.gitignore
index 3ff9027..8636d33 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,4 @@ data/
 vault/
 /hyperhack
 /dist/
+*:Zone.Identifier
diff --git a/SPEC.md b/SPEC.md
index ebb1f0b..8e991c5 100644
--- a/SPEC.md
+++ b/SPEC.md
@@ -42,8 +42,8 @@ The author writes in Obsidian and publishes by syncing the vault to the bucket.
 | Users | One author. No registration. Public side is read-only. |
 | Backend | Go 1.27, latest stable (go1.27.3 on 2026-11-03). `go.mod`: `go 1.27` + `toolchain go1.27.3`. Builder image: `golang:1.27`. Check go.dev/dl before starting; Dependabot keeps it current. |
 | Frontend | Server-side rendering with `html/template`. No framework. Minimal vanilla JS: votes, ALTCHA, view and time beacon. |
-| Themes | Light and dark, toggle in the top bar. System theme by default until the visitor picks one. The choice is stored in a cookie and rendered on the server (no inline JS). |
-| Design | Beautiful, minimal, responsive. Designed during implementation. |
+| Themes | Light and dark, toggle in the top bar. System theme by default until the visitor picks one. The choice is stored in a cookie and rendered on the server (no inline JS). The toggle is a form that posts to `/prefs`, so it works without JS. |
+| Design | Beautiful, minimal, responsive. Designed during implementation. Fonts: Inter (text) and JetBrains Mono (code), OFL, self-hosted, Latin + Cyrillic subsets. |
 | Languages | Code, docs, UI: English. UI also in Russian. Default: `DEFAULT_LANG` (`en` / `ru`) in `.env`. Visitor switch in the top bar; the choice is stored in a cookie (the server must know it to render the page). Post text is not translated. |
 | Storage | Garage (S3 API), path-style addressing. Client: `github.com/minio/minio-go/v7`. |
 | Post format | One `.md` = one post. Metadata: Obsidian properties (YAML frontmatter). |
@@ -118,6 +118,7 @@ Proposed variables (final names set during implementation):
 ## Bucket layout
 
 - `assets/` — all assets: covers, images in posts. Decided.
+- `assets/logo.svg` — optional site logo in the top bar. Without it the service shows a built-in mark.
 - The service ignores keys where any path segment starts with `.` or `_` (same rule as Remotely Save).
 
 ### Posts
@@ -258,7 +259,7 @@ The service stores per-post metrics only. Storage: SQLite.
 ### Estimated reading time
 
 - Public: shown on the post (e.g. "5 min read").
-- Computed from the post text at render time: word count / `READING_WPM`.
+- Computed from the post text at render time: word count / `READING_WPM`, rounded up, at least 1 minute.
 - Proposed: code blocks and images are counted separately.
 - Not related to measured time on page.
 
@@ -415,6 +416,8 @@ Trust boundaries: internet → Caddy → service; bucket → service (semi-trust
 | `/reindex` | POST | private network | Caddy block, `REINDEX_ALLOW`, `REINDEX_TOKEN` |
 | `/metrics` | GET | private network | Caddy block, `METRICS_ALLOW` |
 | `/healthz` | GET | public | constant body, no data |
+| `/prefs` | POST | public | form body ≤ 4 KB, enum check for `theme` / `lang`, redirect only to a local path |
+| `/static/*` | GET | public | embedded CSS and fonts only, no directory listing |
 
 Other methods → `405`. Unknown paths → `404`.
 
@@ -606,3 +609,4 @@ Other methods → `405`. Unknown paths → `404`.
 - 2026-11-03 — Go 1.27 (go1.27.3).
 - 2026-11-03 — Config defaults: `POLL_INTERVAL` 60s, `READING_WPM` 200, `LOG_LEVEL` info, `LOG_FORMAT` json, `DATA_DIR` /data, `VAULT_DIR` /vault, `ALTCHA_MAX_NUMBER` 100000, `S3_REGION` garage. Log component `main`. The service listens on fixed port 8080.
 - 2026-11-03 — Sync: S3 client `minio-go/v7`, frontmatter via `go.yaml.in/yaml/v3`, GFM. Mirror state in `VAULT_DIR/.hyperhack.json`. S3 down at startup: serve from the mirror; exit 1 only with no mirror. No Remotely Save prefix. Keys with a `.` or `_` segment are ignored (was proposed). `MAX_OBJECTS` counts all keys. An invalid frontmatter field skips the post. 3 S3 attempts per poll. `/reindex` waits for the sync and returns `204`.
+- 2026-11-04 — Pages: theme and language switch via a no-JS form `POST /prefs`; cookies `theme` / `lang` (`HttpOnly; SameSite=Lax; Max-Age=1 year`, `Secure` on https). Logo from `assets/logo.svg`, built-in mark otherwise. Fonts Inter + JetBrains Mono, self-hosted. Pagination `/?page=N`: page 1 is `/`, other out-of-range values → `404`. `<html lang>` from the post; the top bar keeps the UI language. CSS and fonts at `/static/*`.
diff --git a/SPEC.ru.md b/SPEC.ru.md
index 813015a..ee5e937 100644
--- a/SPEC.ru.md
+++ b/SPEC.ru.md
@@ -42,8 +42,8 @@
 | Пользователи | Один автор. Регистрации нет. Публичная часть только читает. |
 | Backend | Go 1.27, последняя стабильная (go1.27.3 на 2026-11-03). `go.mod`: `go 1.27` + `toolchain go1.27.3`. Образ сборки: `golang:1.27`. Перед стартом проверить go.dev/dl; дальше версию обновляет Dependabot. |
 | Frontend | Серверный рендер через `html/template`. Без фреймворка. Минимум vanilla JS: голоса, ALTCHA, beacon просмотров и времени. |
-| Темы | Светлая и тёмная, переключатель в верхнем баре. По умолчанию тема системы, пока читатель не выбрал свою. Выбор хранится в cookie и рендерится на сервере (без inline JS). |
-| Дизайн | Красивый, минималистичный, адаптивный. Делается на этапе реализации. |
+| Темы | Светлая и тёмная, переключатель в верхнем баре. По умолчанию тема системы, пока читатель не выбрал свою. Выбор хранится в cookie и рендерится на сервере (без inline JS). Переключатель — форма, которая отправляет `/prefs`, поэтому работает без JS. |
+| Дизайн | Красивый, минималистичный, адаптивный. Делается на этапе реализации. Шрифты: Inter (текст) и JetBrains Mono (код), OFL, свои, наборы латиница + кириллица. |
 | Языки | Код, доки, интерфейс — английский. Интерфейс также на русском. По умолчанию — `DEFAULT_LANG` (`en` / `ru`) в `.env`. Переключатель для читателя в верхнем баре; выбор хранится в cookie (сервер должен знать язык для рендера). Текст постов не переводится. |
 | Хранилище | Garage (S3 API), path-style адресация. Клиент: `github.com/minio/minio-go/v7`. |
 | Формат поста | Один `.md` = один пост. Метаданные — свойства Obsidian (YAML frontmatter). |
@@ -118,6 +118,7 @@
 ## Структура бакета
 
 - `assets/` — все ассеты: обложки, картинки в постах. Решено.
+- `assets/logo.svg` — необязательный логотип сайта в верхнем баре. Без него сервис показывает встроенный знак.
 - Сервис игнорирует ключи, где любой сегмент пути начинается с `.` или `_` (как Remotely Save).
 
 ### Посты
@@ -258,7 +259,7 @@ Garage не шлёт уведомления об изменениях в бак
 ### Расчётное время чтения
 
 - Публично: показывается на посте (например, «5 мин чтения»).
-- Считается из текста поста при рендере: число слов / `READING_WPM`.
+- Считается из текста поста при рендере: число слов / `READING_WPM`, с округлением вверх, минимум 1 минута.
 - Предложено: блоки кода и картинки учитываются отдельно.
 - Не связано с измеренным временем на странице.
 
@@ -415,6 +416,8 @@ Garage не шлёт уведомления об изменениях в бак
 | `/reindex` | POST | приватная сеть | блок в Caddy, `REINDEX_ALLOW`, `REINDEX_TOKEN` |
 | `/metrics` | GET | приватная сеть | блок в Caddy, `METRICS_ALLOW` |
 | `/healthz` | GET | публичный | постоянный ответ, без данных |
+| `/prefs` | POST | публичный | тело формы ≤ 4 КБ, проверка перечислений `theme` / `lang`, редирект только на локальный путь |
+| `/static/*` | GET | публичный | только встроенные CSS и шрифты, без листинга папок |
 
 Другие методы → `405`. Неизвестные пути → `404`.
 
@@ -606,3 +609,4 @@ Garage не шлёт уведомления об изменениях в бак
 - 2026-11-03 — Go 1.27 (go1.27.3).
 - 2026-11-03 — Значения по умолчанию: `POLL_INTERVAL` 60s, `READING_WPM` 200, `LOG_LEVEL` info, `LOG_FORMAT` json, `DATA_DIR` /data, `VAULT_DIR` /vault, `ALTCHA_MAX_NUMBER` 100000, `S3_REGION` garage. Компонент логов `main`. Сервис слушает фиксированный порт 8080.
 - 2026-11-03 — Синхронизация: клиент S3 `minio-go/v7`, frontmatter через `go.yaml.in/yaml/v3`, GFM. Состояние зеркала в `VAULT_DIR/.hyperhack.json`. S3 недоступен при старте: работаем из зеркала; выход с кодом 1 только без зеркала. Без префикса Remotely Save. Ключи с сегментом на `.` или `_` игнорируются (было предложено). `MAX_OBJECTS` считает все ключи. Неверное поле frontmatter — пост пропускается. 3 попытки S3 за опрос. `/reindex` ждёт синхронизацию и возвращает `204`.
+- 2026-11-04 — Страницы: тема и язык переключаются формой без JS `POST /prefs`; cookie `theme` / `lang` (`HttpOnly; SameSite=Lax; Max-Age=1 год`, `Secure` на https). Логотип из `assets/logo.svg`, иначе встроенный знак. Шрифты Inter + JetBrains Mono, свои. Пагинация `/?page=N`: страница 1 — это `/`, другие значения вне диапазона → `404`. `<html lang>` из поста; верхний бар остаётся на языке интерфейса. CSS и шрифты на `/static/*`.
diff --git a/internal/content/content_test.go b/internal/content/content_test.go
index e3ff52b..2e3ac66 100644
--- a/internal/content/content_test.go
+++ b/internal/content/content_test.go
@@ -31,6 +31,9 @@ func TestParse(t *testing.T) {
 	if strings.Join(p.Tags, ",") != "go,selfhost" {
 		t.Errorf("tags = %q", p.Tags)
 	}
+	if p.Words != 2 {
+		t.Errorf("words = %d, want 2", p.Words)
+	}
 	if !strings.Contains(string(p.HTML), "<strong>world</strong>") {
 		t.Errorf("html = %s", p.HTML)
 	}
diff --git a/internal/content/index.go b/internal/content/index.go
index e6c0a91..2564854 100644
--- a/internal/content/index.go
+++ b/internal/content/index.go
@@ -10,6 +10,7 @@ import (
 type Index struct {
 	posts  []*Post // newest first
 	bySlug map[string]*Post
+	Logo   bool // assets/logo.svg is in the mirror
 }
 
 // NewIndex builds an index. Drafts are left out.
diff --git a/internal/content/post.go b/internal/content/post.go
index 66cd9f7..177b4f9 100644
--- a/internal/content/post.go
+++ b/internal/content/post.go
@@ -28,6 +28,7 @@ type Post struct {
 	Cover       string // key inside assets/, empty if not set
 	Lang        string
 	Draft       bool
+	Words       int           // body word count, for reading time
 	HTML        template.HTML // sanitized
 }
 
@@ -127,6 +128,7 @@ func (r *Renderer) Parse(key string, src []byte) (*Post, error) {
 			return nil, errors.New("no slug: set slug in frontmatter")
 		}
 	}
+	p.Words = len(bytes.Fields(body))
 	if p.HTML, err = r.render(body); err != nil {
 		return nil, fmt.Errorf("render: %w", err)
 	}
diff --git a/internal/server/pages.go b/internal/server/pages.go
new file mode 100644
index 0000000..5a05be6
--- /dev/null
+++ b/internal/server/pages.go
@@ -0,0 +1,317 @@
+package server
+
+import (
+	"bytes"
+	"crypto/sha256"
+	"embed"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	"html/template"
+	"io/fs"
+	"log/slog"
+	"net/http"
+	"net/url"
+	"path"
+	"slices"
+	"strconv"
+	"strings"
+	"time"
+
+	chromahtml "github.com/alecthomas/chroma/v2/formatters/html"
+	"github.com/alecthomas/chroma/v2/styles"
+
+	"github.com/Mimic890/hyperhack/internal/config"
+	"github.com/Mimic890/hyperhack/internal/content"
+)
+
+//go:embed web
+var webFS embed.FS
+
+var (
+	langs  = []string{"en", "ru"}
+	themes = []string{"light", "dark"}
+)
+
+const cookieMaxAge = 365 * 24 * 60 * 60
+
+type site struct {
+	Name   string
+	GitHub string
+	Logo   bool
+}
+
+// pageData is what every template gets. Fields a page does not use stay zero.
+type pageData struct {
+	Lang    string // UI language
+	DocLang string // <html lang>: the post language on post pages
+	Theme   string // "", "light" or "dark"
+	Path    string // current URI, for the prefs form
+	CSS     string
+	Site    site
+
+	Posts       []*content.Post
+	Page, Pages int
+
+	Post *content.Post
+
+	Title, Text string // i18n keys for the error page
+}
+
+type pages struct {
+	log   *slog.Logger
+	cfg   *config.Config
+	index func() *content.Index
+	tmpl  map[string]map[string]*template.Template // lang → page → template
+	css   []byte
+	cssV  string
+	fonts fs.FS
+}
+
+func newPages(log *slog.Logger, cfg *config.Config, index func() *content.Index) *pages {
+	msgs := map[string]map[string]string{}
+	for _, l := range langs {
+		b, err := webFS.ReadFile("web/i18n/" + l + ".json")
+		if err != nil {
+			panic(err)
+		}
+		m := map[string]string{}
+		if err := json.Unmarshal(b, &m); err != nil {
+			panic(fmt.Sprintf("i18n %s: %v", l, err))
+		}
+		msgs[l] = m
+	}
+
+	p := &pages{log: log, cfg: cfg, index: index, tmpl: map[string]map[string]*template.Template{}}
+	for _, l := range langs {
+		p.tmpl[l] = map[string]*template.Template{}
+		for _, name := range []string{"home", "post", "error"} {
+			t := template.Must(template.New("").Funcs(funcs(msgs[l], cfg.ReadingWPM)).
+				ParseFS(webFS, "web/templates/layout.html", "web/templates/"+name+".html"))
+			p.tmpl[l][name] = t
+		}
+	}
+
+	base, err := webFS.ReadFile("web/static/style.css")
+	if err != nil {
+		panic(err)
+	}
+	p.css = append(base, themedChromaCSS()...)
+	sum := sha256.Sum256(p.css)
+	p.cssV = "/static/style.css?v=" + hex.EncodeToString(sum[:6])
+	p.fonts, err = fs.Sub(webFS, "web/static/fonts")
+	if err != nil {
+		panic(err)
+	}
+	return p
+}
+
+func funcs(msgs map[string]string, wpm int) template.FuncMap {
+	t := func(key string, kv ...any) string {
+		s, ok := msgs[key]
+		if !ok {
+			return key
+		}
+		for i := 0; i+1 < len(kv); i += 2 {
+			s = strings.ReplaceAll(s, "{"+fmt.Sprint(kv[i])+"}", fmt.Sprint(kv[i+1]))
+		}
+		return s
+	}
+	return template.FuncMap{
+		"t": t,
+		"date": func(d time.Time) string {
+			return t("date", "day", d.Day(), "month", t("month_"+strconv.Itoa(int(d.Month()))), "year", d.Year())
+		},
+		"minutes": func(words int) int { return max(1, (words+wpm-1)/wpm) },
+		"asset":   func(key string) string { return (&url.URL{Path: "/" + key}).EscapedPath() },
+		"add":     func(a, b int) int { return a + b },
+	}
+}
+
+// themedChromaCSS scopes the light and dark code palettes to the effective theme,
+// the same way style.css scopes its tokens.
+func themedChromaCSS() []byte {
+	var b bytes.Buffer
+	for _, th := range []struct{ name, style, other string }{{"light", "github", "dark"}, {"dark", "github-dark", "light"}} {
+		b.WriteString(chromaCSS(th.style, `:root[data-theme="`+th.name+`"]`))
+		b.WriteString("@media (prefers-color-scheme: " + th.name + ") {\n")
+		b.WriteString(chromaCSS(th.style, `:root:not([data-theme="`+th.other+`"])`))
+		b.WriteString("}\n")
+	}
+	return b.Bytes()
+}
+
+// chromaCSS writes the token rules of a chroma style under scope.
+// The wrapper and .bg rules are dropped: style.css sets the code block background.
+func chromaCSS(style, scope string) string {
+	var buf strings.Builder
+	if err := chromahtml.New(chromahtml.WithClasses(true)).WriteCSS(&buf, styles.Get(style)); err != nil {
+		panic(err)
+	}
+	var out strings.Builder
+	for line := range strings.Lines(buf.String()) {
+		_, rule, ok := strings.Cut(line, "*/ ")
+		if !ok || !strings.HasPrefix(rule, ".chroma .") {
+			continue
+		}
+		sel, body, _ := strings.Cut(rule, "{")
+		var scoped []string
+		for s := range strings.SplitSeq(sel, ",") {
+			scoped = append(scoped, scope+" "+strings.TrimSpace(s))
+		}
+		out.WriteString(strings.Join(scoped, ", ") + " {" + body)
+	}
+	return out.String()
+}
+
+func (p *pages) data(r *http.Request) pageData {
+	d := pageData{
+		Lang: p.cfg.DefaultLang,
+		Path: r.URL.RequestURI(),
+		CSS:  p.cssV,
+		Site: site{Name: p.cfg.SiteName, GitHub: p.cfg.GitHubURL},
+	}
+	if c, err := r.Cookie("lang"); err == nil && slices.Contains(langs, c.Value) {
+		d.Lang = c.Value
+	}
+	if c, err := r.Cookie("theme"); err == nil && slices.Contains(themes, c.Value) {
+		d.Theme = c.Value
+	}
+	d.DocLang = d.Lang
+	if ix := p.index(); ix != nil {
+		d.Site.Logo = ix.Logo
+	}
+	return d
+}
+
+func (p *pages) render(w http.ResponseWriter, status int, name string, d pageData) {
+	var buf bytes.Buffer
+	if err := p.tmpl[d.Lang][name].ExecuteTemplate(&buf, "layout.html", d); err != nil {
+		p.log.Error("template", "page", name, "err", err)
+		http.Error(w, http.StatusText(http.StatusInternalServerError), http.StatusInternalServerError)
+		return
+	}
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	w.WriteHeader(status)
+	_, _ = w.Write(buf.Bytes())
+}
+
+func (p *pages) errorPage(w http.ResponseWriter, r *http.Request, status int) {
+	d := p.data(r)
+	d.Title, d.Text = "not_found", "not_found_text"
+	if status == http.StatusServiceUnavailable {
+		d.Title, d.Text = "not_ready", "not_ready_text"
+		w.Header().Set("Retry-After", "30")
+	}
+	p.render(w, status, "error", d)
+}
+
+func (p *pages) home(w http.ResponseWriter, r *http.Request) {
+	ix := p.index()
+	if ix == nil {
+		p.errorPage(w, r, http.StatusServiceUnavailable)
+		return
+	}
+	posts := ix.Posts()
+	size := p.cfg.PageSize
+	d := p.data(r)
+	d.Pages = max(1, (len(posts)+size-1)/size)
+	d.Page = 1
+	if s := r.URL.Query().Get("page"); s != "" {
+		n, err := strconv.Atoi(s)
+		if err != nil || n < 2 || n > d.Pages { // page 1 lives at "/"
+			p.errorPage(w, r, http.StatusNotFound)
+			return
+		}
+		d.Page = n
+	}
+	start := (d.Page - 1) * size
+	d.Posts = posts[start:min(start+size, len(posts))]
+	p.render(w, http.StatusOK, "home", d)
+}
+
+func (p *pages) post(w http.ResponseWriter, r *http.Request) {
+	ix := p.index()
+	if ix == nil {
+		p.errorPage(w, r, http.StatusServiceUnavailable)
+		return
+	}
+	post := ix.Get(r.PathValue("slug"))
+	if post == nil {
+		p.errorPage(w, r, http.StatusNotFound)
+		return
+	}
+	d := p.data(r)
+	d.Post = post
+	d.DocLang = post.Lang
+	p.render(w, http.StatusOK, "post", d)
+}
+
+func (p *pages) notFound(w http.ResponseWriter, r *http.Request) {
+	p.errorPage(w, r, http.StatusNotFound)
+}
+
+// prefs handles the top-bar form: it sets the theme or lang cookie and goes back.
+func (p *pages) prefs(w http.ResponseWriter, r *http.Request) {
+	r.Body = http.MaxBytesReader(w, r.Body, 4<<10)
+	if err := r.ParseForm(); err != nil {
+		http.Error(w, http.StatusText(http.StatusBadRequest), http.StatusBadRequest)
+		return
+	}
+	set := func(name string, allowed []string) bool {
+		v := r.PostForm.Get(name)
+		if v == "" {
+			return true
+		}
+		if !slices.Contains(allowed, v) {
+			return false
+		}
+		http.SetCookie(w, &http.Cookie{
+			Name: name, Value: v, Path: "/", MaxAge: cookieMaxAge,
+			HttpOnly: true, Secure: p.cfg.SiteURL.Scheme == "https", SameSite: http.SameSiteLaxMode,
+		})
+		return true
+	}
+	if !set("theme", themes) || !set("lang", langs) {
+		http.Error(w, http.StatusText(http.StatusBadRequest), http.StatusBadRequest)
+		return
+	}
+	http.Redirect(w, r, localPath(r.PostForm.Get("back")), http.StatusSeeOther)
+}
+
+// localPath returns back if it is a path on this site, else "/". This blocks open redirects.
+func localPath(back string) string {
+	if len(back) > 2048 || !strings.HasPrefix(back, "/") || strings.HasPrefix(back, "//") || strings.HasPrefix(back, `/\`) {
+		return "/"
+	}
+	u, err := url.Parse(back)
+	if err != nil || u.Scheme != "" || u.Host != "" || u.User != nil {
+		return "/"
+	}
+	for _, c := range back {
+		if c < 0x20 || c == 0x7f {
+			return "/"
+		}
+	}
+	return back
+}
+
+func (p *pages) style(w http.ResponseWriter, _ *http.Request) {
+	w.Header().Set("Content-Type", "text/css; charset=utf-8")
+	w.Header().Set("Cache-Control", "public, max-age=31536000, immutable") // URL carries a content hash
+	_, _ = w.Write(p.css)
+}
+
+func (p *pages) font(w http.ResponseWriter, r *http.Request) {
+	name := r.PathValue("file")
+	if ext := path.Ext(name); ext != ".woff2" && ext != ".txt" {
+		p.errorPage(w, r, http.StatusNotFound)
+		return
+	}
+	if _, err := fs.Stat(p.fonts, name); err != nil {
+		p.errorPage(w, r, http.StatusNotFound)
+		return
+	}
+	w.Header().Set("Cache-Control", "public, max-age=2592000")
+	http.ServeFileFS(w, r, p.fonts, name)
+}
diff --git a/internal/server/pages_test.go b/internal/server/pages_test.go
new file mode 100644
index 0000000..2bd298c
--- /dev/null
+++ b/internal/server/pages_test.go
@@ -0,0 +1,254 @@
+package server
+
+import (
+	"encoding/json"
+	"html/template"
+	"log/slog"
+	"maps"
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"slices"
+	"strings"
+	"sync/atomic"
+	"testing"
+	"time"
+
+	"github.com/Mimic890/hyperhack/internal/config"
+	"github.com/Mimic890/hyperhack/internal/content"
+)
+
+func testConfig() *config.Config {
+	u, _ := url.Parse("https://example.com")
+	return &config.Config{SiteName: "Test <Blog>", SiteURL: u, DefaultLang: "en", ReadingWPM: 200, PageSize: 2}
+}
+
+func testIndex(n int) *content.Index {
+	var posts []*content.Post
+	for i := range n {
+		posts = append(posts, &content.Post{
+			Key: string(rune('a'+i)) + ".md", Slug: "post-" + string(rune('a'+i)), Title: "Post " + string(rune('A'+i)),
+			Date: time.Date(2026, 11, 1+i, 0, 0, 0, 0, time.UTC), Lang: "en", Words: 450, HTML: "<p>body</p>",
+		})
+	}
+	posts = append(posts, &content.Post{
+		Key: "x.md", Slug: "xss", Title: `<script>alert(1)</script>`, Description: `"><img src=x onerror=alert(1)>`,
+		Date: time.Date(2026, 10, 1, 0, 0, 0, 0, time.UTC), Updated: time.Date(2026, 11, 5, 0, 0, 0, 0, time.UTC),
+		Lang: "ru", Cover: "assets/covers/a b#c.webp", Words: 10, HTML: template.HTML("<p>Привет</p>"),
+	})
+	return content.NewIndex(posts, slog.New(slog.DiscardHandler))
+}
+
+type testSite struct {
+	h   http.Handler
+	idx atomic.Pointer[content.Index]
+}
+
+func newSite(t *testing.T, cfg *config.Config, ix *content.Index) *testSite {
+	t.Helper()
+	s := &testSite{}
+	s.idx.Store(ix)
+	var ready atomic.Bool
+	ready.Store(true)
+	s.h = New(slog.New(slog.DiscardHandler), cfg, &ready, nil, s.idx.Load)
+	return s
+}
+
+func (s *testSite) get(path string, cookies ...*http.Cookie) *httptest.ResponseRecorder {
+	r := httptest.NewRequest("GET", path, nil)
+	for _, c := range cookies {
+		r.AddCookie(c)
+	}
+	rec := httptest.NewRecorder()
+	s.h.ServeHTTP(rec, r)
+	return rec
+}
+
+func mustContain(t *testing.T, body string, want ...string) {
+	t.Helper()
+	for _, w := range want {
+		if !strings.Contains(body, w) {
+			t.Errorf("missing %q", w)
+		}
+	}
+}
+
+func TestI18nKeysMatch(t *testing.T) {
+	keys := map[string][]string{}
+	for _, l := range langs {
+		b, err := webFS.ReadFile("web/i18n/" + l + ".json")
+		if err != nil {
+			t.Fatal(err)
+		}
+		m := map[string]string{}
+		if err := json.Unmarshal(b, &m); err != nil {
+			t.Fatal(err)
+		}
+		keys[l] = slices.Sorted(maps.Keys(m))
+	}
+	if !slices.Equal(keys["en"], keys["ru"]) {
+		t.Errorf("en and ru keys differ:\nen %v\nru %v", keys["en"], keys["ru"])
+	}
+}
+
+func TestHome(t *testing.T) {
+	s := newSite(t, testConfig(), testIndex(4)) // 5 posts, 2 per page
+	rec := s.get("/")
+	body := rec.Body.String()
+	if rec.Code != 200 || rec.Header().Get("Content-Type") != "text/html; charset=utf-8" {
+		t.Fatalf("home = %d %s", rec.Code, rec.Header().Get("Content-Type"))
+	}
+	mustContain(t, body, `<html lang="en">`, "Test &lt;Blog&gt;", `href="/posts/post-d"`, "Post D", "Post C",
+		`<time datetime="2026-11-04">November 4, 2026</time>`, "3 min read", "Page 1 of 3", `href="/?page=2"`,
+		`<svg class="logo"`, `name="back" value="/"`, `aria-pressed="true">EN`)
+	if strings.Contains(body, "Post B") || strings.Contains(body, "github") {
+		t.Error("page 1 shows too much")
+	}
+
+	body = s.get("/?page=3").Body.String()
+	mustContain(t, body, "&lt;script&gt;", "&#34;&gt;&lt;img src=x", `rel="prev" href="/?page=2"`, "Page 3 of 3")
+	if strings.Contains(body, "<script>alert") || strings.Contains(body, "<img src=x") {
+		t.Error("frontmatter not escaped")
+	}
+	mustContain(t, s.get("/?page=2").Body.String(), `rel="prev" href="/"`)
+	for _, bad := range []string{"/?page=1", "/?page=4", "/?page=0", "/?page=abc", "/?page=-1"} {
+		if got := s.get(bad).Code; got != 404 {
+			t.Errorf("%s = %d, want 404", bad, got)
+		}
+	}
+}
+
+func TestHomeEmptyAndNotReady(t *testing.T) {
+	mustContain(t, newSite(t, testConfig(), content.NewIndex(nil, slog.New(slog.DiscardHandler))).get("/").Body.String(), "No posts yet.")
+	s := newSite(t, testConfig(), nil)
+	for _, p := range []string{"/", "/posts/x"} {
+		rec := s.get(p)
+		if rec.Code != 503 || rec.Header().Get("Retry-After") == "" {
+			t.Errorf("%s not ready = %d", p, rec.Code)
+		}
+		mustContain(t, rec.Body.String(), "Starting up")
+	}
+}
+
+func TestPost(t *testing.T) {
+	cfg := testConfig()
+	cfg.GitHubURL = "https://github.com/example"
+	ix := testIndex(1)
+	ix.Logo = true
+	s := newSite(t, cfg, ix)
+	rec := s.get("/posts/xss")
+	if rec.Code != 200 {
+		t.Fatalf("post = %d", rec.Code)
+	}
+	body := rec.Body.String()
+	mustContain(t, body, `<html lang="ru">`, `<header class="topbar" lang="en">`, "<p>Привет</p>",
+		`src="/assets/covers/a%20b%23c.webp"`, "Updated November 5, 2026", "1 min read",
+		`<img class="logo" src="/assets/logo.svg"`, `href="https://github.com/example"`, `name="back" value="/posts/xss"`)
+	if strings.Contains(body, "<script>alert") {
+		t.Error("title not escaped")
+	}
+	if rec := s.get("/posts/nope"); rec.Code != 404 || !strings.Contains(rec.Body.String(), "Page not found") {
+		t.Errorf("missing post = %d", rec.Code)
+	}
+}
+
+func TestCookies(t *testing.T) {
+	s := newSite(t, testConfig(), testIndex(1))
+	body := s.get("/", &http.Cookie{Name: "lang", Value: "ru"}, &http.Cookie{Name: "theme", Value: "dark"}).Body.String()
+	mustContain(t, body, `<html lang="ru" data-theme="dark">`, `content="dark"`, "Новые", "1 ноября 2026", "3 мин чтения", `aria-pressed="true">RU`)
+
+	body = s.get("/", &http.Cookie{Name: "lang", Value: "de"}, &http.Cookie{Name: "theme", Value: `"><script>`}).Body.String()
+	mustContain(t, body, `<html lang="en">`, `content="light dark"`, "Newest")
+
+	cfg := testConfig()
+	cfg.DefaultLang = "ru"
+	mustContain(t, newSite(t, cfg, testIndex(1)).get("/nope").Body.String(), "Страница не найдена")
+}
+
+func TestPrefs(t *testing.T) {
+	s := newSite(t, testConfig(), testIndex(1))
+	post := func(form url.Values) *httptest.ResponseRecorder {
+		r := httptest.NewRequest("POST", "/prefs", strings.NewReader(form.Encode()))
+		r.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+		rec := httptest.NewRecorder()
+		s.h.ServeHTTP(rec, r)
+		return rec
+	}
+	rec := post(url.Values{"theme": {"dark"}, "back": {"/posts/xss?x=1"}})
+	if rec.Code != http.StatusSeeOther || rec.Header().Get("Location") != "/posts/xss?x=1" {
+		t.Fatalf("prefs = %d %s", rec.Code, rec.Header().Get("Location"))
+	}
+	c := rec.Header().Get("Set-Cookie")
+	for _, want := range []string{"theme=dark", "Path=/", "Max-Age=31536000", "HttpOnly", "Secure", "SameSite=Lax"} {
+		if !strings.Contains(c, want) {
+			t.Errorf("cookie %q missing %s", c, want)
+		}
+	}
+	if rec := post(url.Values{"lang": {"ru"}}); rec.Header().Get("Location") != "/" || !strings.Contains(rec.Header().Get("Set-Cookie"), "lang=ru") {
+		t.Errorf("lang prefs = %v", rec.Header())
+	}
+	for _, bad := range []url.Values{{"theme": {"blue"}}, {"lang": {"de"}}, {"lang": {"ru; Path=/x"}}} {
+		if rec := post(bad); rec.Code != 400 || rec.Header().Get("Set-Cookie") != "" {
+			t.Errorf("%v = %d", bad, rec.Code)
+		}
+	}
+	if rec := post(url.Values{"back": {strings.Repeat("a", 5000)}}); rec.Code != 400 {
+		t.Errorf("oversized body = %d", rec.Code)
+	}
+	cfg := testConfig()
+	cfg.SiteURL, _ = url.Parse("http://localhost:8080")
+	s = newSite(t, cfg, testIndex(1))
+	if c := post(url.Values{"theme": {"light"}}).Header().Get("Set-Cookie"); strings.Contains(c, "Secure") {
+		t.Errorf("Secure cookie on an http site: %s", c)
+	}
+}
+
+func TestLocalPath(t *testing.T) {
+	tests := map[string]string{
+		"/":                    "/",
+		"/posts/a?page=2":      "/posts/a?page=2",
+		"":                     "/",
+		"posts/a":              "/",
+		"//evil.example":       "/",
+		`/\evil.example`:       "/",
+		"https://evil.example": "/",
+		"/a\r\nSet-Cookie: x":  "/",
+		"/%0d%0a":              "/%0d%0a",
+		"javascript:alert(1)":  "/",
+	}
+	for in, want := range tests {
+		if got := localPath(in); got != want {
+			t.Errorf("localPath(%q) = %q, want %q", in, got, want)
+		}
+	}
+}
+
+func TestStatic(t *testing.T) {
+	s := newSite(t, testConfig(), testIndex(1))
+	home := s.get("/").Body.String()
+	i := strings.Index(home, "/static/style.css?v=")
+	if i < 0 {
+		t.Fatal("no stylesheet link")
+	}
+	rec := s.get("/static/style.css")
+	if rec.Code != 200 || !strings.HasPrefix(rec.Header().Get("Content-Type"), "text/css") || !strings.Contains(rec.Header().Get("Cache-Control"), "immutable") {
+		t.Fatalf("css = %d %v", rec.Code, rec.Header())
+	}
+	css := rec.Body.String()
+	mustContain(t, css, `:root[data-theme="dark"] .chroma .k {`, `:root:not([data-theme="light"]) .chroma .k {`,
+		`:root[data-theme="light"] .chroma .k {`, "@font-face")
+	if strings.Contains(css, ".bg {") {
+		t.Error("chroma .bg rule not dropped")
+	}
+	if rec := s.get("/static/fonts/inter-latin-wght-normal.woff2"); rec.Code != 200 || rec.Body.Len() < 10000 {
+		t.Errorf("font = %d, %d bytes", rec.Code, rec.Body.Len())
+	}
+	if got := s.get("/static/fonts/../../pages.go").Code; got == 200 {
+		t.Error("path traversal served a file")
+	}
+	for _, p := range []string{"/static/fonts/", "/static/fonts/nope.woff2", "/static/fonts/..%2fstyle.css", "/static/"} {
+		if got := s.get(p).Code; got != 404 {
+			t.Errorf("%s = %d, want 404", p, got)
+		}
+	}
+}
diff --git a/internal/server/reindex_test.go b/internal/server/reindex_test.go
index ae1088e..048add0 100644
--- a/internal/server/reindex_test.go
+++ b/internal/server/reindex_test.go
@@ -11,6 +11,7 @@ import (
 	"testing"
 
 	"github.com/Mimic890/hyperhack/internal/config"
+	"github.com/Mimic890/hyperhack/internal/content"
 )
 
 const token = "0123456789abcdef0123456789abcdef"
@@ -27,8 +28,9 @@ func TestReindex(t *testing.T) {
 		}
 		return nil
 	}
-	cfg := &config.Config{ReindexToken: token, ReindexAllow: allow, TrustedProxies: trusted}
-	h := New(slog.New(slog.DiscardHandler), cfg, new(atomic.Bool), sync)
+	cfg := testConfig()
+	cfg.ReindexToken, cfg.ReindexAllow, cfg.TrustedProxies = token, allow, trusted
+	h := New(slog.New(slog.DiscardHandler), cfg, new(atomic.Bool), sync, func() *content.Index { return nil })
 
 	req := func(remote, xff, auth string) int {
 		r := httptest.NewRequest("POST", "/reindex", nil)
diff --git a/internal/server/server.go b/internal/server/server.go
index 0587121..8a1c730 100644
--- a/internal/server/server.go
+++ b/internal/server/server.go
@@ -12,12 +12,28 @@ import (
 	"time"
 
 	"github.com/Mimic890/hyperhack/internal/config"
+	"github.com/Mimic890/hyperhack/internal/content"
 )
 
-// New returns the root handler. ready gates /healthz; sync runs a bucket sync for /reindex.
-func New(log *slog.Logger, cfg *config.Config, ready *atomic.Bool, sync func(context.Context) error) http.Handler {
+// New returns the root handler. ready gates /healthz; sync runs a bucket sync for /reindex;
+// index returns the current posts (nil before the first load).
+func New(log *slog.Logger, cfg *config.Config, ready *atomic.Bool, sync func(context.Context) error, index func() *content.Index) http.Handler {
+	p := newPages(log, cfg, index)
 	mux := http.NewServeMux()
+	mux.HandleFunc("GET /{$}", p.home)
+	mux.HandleFunc("GET /posts/{slug}", p.post)
+	mux.HandleFunc("POST /prefs", p.prefs)
+	mux.HandleFunc("GET /static/style.css", p.style)
+	mux.HandleFunc("GET /static/fonts/{file}", p.font)
+	mux.HandleFunc("GET /", p.notFound)
 	mux.Handle("POST /reindex", reindex(log, cfg.ReindexToken, cfg.ReindexAllow, cfg.TrustedProxies, sync))
+	// The "GET /" catch-all would answer GET on POST-only paths with 404; SPEC wants 405.
+	for _, path := range []string{"/reindex", "/prefs"} {
+		mux.HandleFunc("GET "+path, func(w http.ResponseWriter, _ *http.Request) {
+			w.Header().Set("Allow", http.MethodPost)
+			http.Error(w, http.StatusText(http.StatusMethodNotAllowed), http.StatusMethodNotAllowed)
+		})
+	}
 	mux.HandleFunc("GET /healthz", func(w http.ResponseWriter, _ *http.Request) {
 		w.Header().Set("Content-Type", "text/plain; charset=utf-8")
 		if !ready.Load() {
diff --git a/internal/server/server_test.go b/internal/server/server_test.go
index 57b5c22..d760527 100644
--- a/internal/server/server_test.go
+++ b/internal/server/server_test.go
@@ -5,10 +5,12 @@ import (
 	"log/slog"
 	"net/http"
 	"net/http/httptest"
+	"os"
+	"regexp"
 	"sync/atomic"
 	"testing"
 
-	"github.com/Mimic890/hyperhack/internal/config"
+	"github.com/Mimic890/hyperhack/internal/content"
 )
 
 func do(h http.Handler, method, path string) *httptest.ResponseRecorder {
@@ -19,7 +21,7 @@ func do(h http.Handler, method, path string) *httptest.ResponseRecorder {
 
 func TestRoutes(t *testing.T) {
 	var ready atomic.Bool
-	h := New(slog.New(slog.DiscardHandler), &config.Config{}, &ready, nil)
+	h := New(slog.New(slog.DiscardHandler), testConfig(), &ready, nil, func() *content.Index { return nil })
 
 	if got := do(h, "GET", "/healthz").Code; got != http.StatusServiceUnavailable {
 		t.Errorf("healthz before ready = %d, want 503", got)
@@ -29,8 +31,10 @@ func TestRoutes(t *testing.T) {
 	if rec.Code != http.StatusOK || rec.Body.String() != "ok\n" {
 		t.Errorf("healthz = %d %q", rec.Code, rec.Body)
 	}
-	if got := do(h, "POST", "/healthz").Code; got != http.StatusMethodNotAllowed {
-		t.Errorf("POST /healthz = %d, want 405", got)
+	for _, r := range []struct{ method, path string }{{"POST", "/healthz"}, {"GET", "/prefs"}, {"PUT", "/reindex"}, {"POST", "/posts/x"}, {"DELETE", "/"}} {
+		if got := do(h, r.method, r.path).Code; got != http.StatusMethodNotAllowed {
+			t.Errorf("%s %s = %d, want 405", r.method, r.path, got)
+		}
 	}
 	rec = do(h, "GET", "/nope")
 	if rec.Code != http.StatusNotFound {
@@ -53,3 +57,23 @@ func TestPanicRecovery(t *testing.T) {
 		t.Errorf("got %d %q", rec.Code, body)
 	}
 }
+
+// TestCSPMatchesSpec keeps the CSP header identical to SPEC → Security headers.
+func TestCSPMatchesSpec(t *testing.T) {
+	re := regexp.MustCompile("`Content-Security-Policy: (default-src 'self'[^`]*)`")
+	h := New(slog.New(slog.DiscardHandler), testConfig(), new(atomic.Bool), nil, func() *content.Index { return nil })
+	got := do(h, "GET", "/healthz").Header().Get("Content-Security-Policy")
+	for _, f := range []string{"../../SPEC.md", "../../SPEC.ru.md"} {
+		b, err := os.ReadFile(f)
+		if err != nil {
+			t.Fatal(err)
+		}
+		m := re.FindAllSubmatch(b, -1)
+		if len(m) != 1 {
+			t.Fatalf("%s: want one service CSP, found %d", f, len(m))
+		}
+		if want := string(m[0][1]); got != want {
+			t.Errorf("CSP differs from %s:\ngot  %s\nwant %s", f, got, want)
+		}
+	}
+}
diff --git a/internal/server/web/i18n/en.json b/internal/server/web/i18n/en.json
new file mode 100644
index 0000000..335271d
--- /dev/null
+++ b/internal/server/web/i18n/en.json
@@ -0,0 +1,36 @@
+{
+  "skip": "Skip to content",
+  "home": "Main page",
+  "newest": "Newest",
+  "no_posts": "No posts yet.",
+  "min_read": "{n} min read",
+  "updated": "Updated {date}",
+  "newer": "Newer posts",
+  "older": "Older posts",
+  "page_of": "Page {n} of {m}",
+  "pages": "Pages",
+  "settings": "Site settings",
+  "to_dark": "Switch to dark theme",
+  "to_light": "Switch to light theme",
+  "language": "Language",
+  "rss": "RSS feed",
+  "github": "GitHub",
+  "not_found": "Page not found",
+  "not_found_text": "There is nothing at this address.",
+  "not_ready": "Starting up",
+  "not_ready_text": "Posts are still loading. Try again in a minute.",
+  "back_home": "Back to the main page",
+  "date": "{month} {day}, {year}",
+  "month_1": "January",
+  "month_2": "February",
+  "month_3": "March",
+  "month_4": "April",
+  "month_5": "May",
+  "month_6": "June",
+  "month_7": "July",
+  "month_8": "August",
+  "month_9": "September",
+  "month_10": "October",
+  "month_11": "November",
+  "month_12": "December"
+}
diff --git a/internal/server/web/i18n/ru.json b/internal/server/web/i18n/ru.json
new file mode 100644
index 0000000..38ad33f
--- /dev/null
+++ b/internal/server/web/i18n/ru.json
@@ -0,0 +1,36 @@
+{
+  "skip": "Перейти к содержимому",
+  "home": "Главная",
+  "newest": "Новые",
+  "no_posts": "Постов пока нет.",
+  "min_read": "{n} мин чтения",
+  "updated": "Обновлено {date}",
+  "newer": "Новее",
+  "older": "Старше",
+  "page_of": "Страница {n} из {m}",
+  "pages": "Страницы",
+  "settings": "Настройки сайта",
+  "to_dark": "Включить тёмную тему",
+  "to_light": "Включить светлую тему",
+  "language": "Язык",
+  "rss": "RSS-лента",
+  "github": "GitHub",
+  "not_found": "Страница не найдена",
+  "not_found_text": "По этому адресу ничего нет.",
+  "not_ready": "Сайт запускается",
+  "not_ready_text": "Посты ещё загружаются. Попробуйте через минуту.",
+  "back_home": "На главную",
+  "date": "{day} {month} {year}",
+  "month_1": "января",
+  "month_2": "февраля",
+  "month_3": "марта",
+  "month_4": "апреля",
+  "month_5": "мая",
+  "month_6": "июня",
+  "month_7": "июля",
+  "month_8": "августа",
+  "month_9": "сентября",
+  "month_10": "октября",
+  "month_11": "ноября",
+  "month_12": "декабря"
+}
diff --git a/internal/server/web/static/fonts/OFL-Inter.txt b/internal/server/web/static/fonts/OFL-Inter.txt
new file mode 100644
index 0000000..40589da
--- /dev/null
+++ b/internal/server/web/static/fonts/OFL-Inter.txt
@@ -0,0 +1,93 @@
+Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter) Inter-Italic[opsz,wght].ttf: Copyright 2016 The Inter Project Authors (https://github.com/rsms/inter)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/internal/server/web/static/fonts/OFL-JetBrainsMono.txt b/internal/server/web/static/fonts/OFL-JetBrainsMono.txt
new file mode 100644
index 0000000..8f7ed67
--- /dev/null
+++ b/internal/server/web/static/fonts/OFL-JetBrainsMono.txt
@@ -0,0 +1,93 @@
+Copyright 2020 The JetBrains Mono Project Authors (https://github.com/JetBrains/JetBrainsMono) JetBrainsMono-Italic[wght].ttf: Copyright 2020 The JetBrains Mono Project Authors (https://github.com/JetBrains/JetBrainsMono)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+http://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/internal/server/web/static/fonts/inter-cyrillic-wght-italic.woff2 b/internal/server/web/static/fonts/inter-cyrillic-wght-italic.woff2
new file mode 100644
index 0000000..110595f
Binary files /dev/null and b/internal/server/web/static/fonts/inter-cyrillic-wght-italic.woff2 differ
diff --git a/internal/server/web/static/fonts/inter-cyrillic-wght-normal.woff2 b/internal/server/web/static/fonts/inter-cyrillic-wght-normal.woff2
new file mode 100644
index 0000000..d750914
Binary files /dev/null and b/internal/server/web/static/fonts/inter-cyrillic-wght-normal.woff2 differ
diff --git a/internal/server/web/static/fonts/inter-latin-wght-italic.woff2 b/internal/server/web/static/fonts/inter-latin-wght-italic.woff2
new file mode 100644
index 0000000..2f06c65
Binary files /dev/null and b/internal/server/web/static/fonts/inter-latin-wght-italic.woff2 differ
diff --git a/internal/server/web/static/fonts/inter-latin-wght-normal.woff2 b/internal/server/web/static/fonts/inter-latin-wght-normal.woff2
new file mode 100644
index 0000000..d15208d
Binary files /dev/null and b/internal/server/web/static/fonts/inter-latin-wght-normal.woff2 differ
diff --git a/internal/server/web/static/fonts/jetbrains-mono-cyrillic-wght-normal.woff2 b/internal/server/web/static/fonts/jetbrains-mono-cyrillic-wght-normal.woff2
new file mode 100644
index 0000000..8ee2d70
Binary files /dev/null and b/internal/server/web/static/fonts/jetbrains-mono-cyrillic-wght-normal.woff2 differ
diff --git a/internal/server/web/static/fonts/jetbrains-mono-latin-wght-normal.woff2 b/internal/server/web/static/fonts/jetbrains-mono-latin-wght-normal.woff2
new file mode 100644
index 0000000..cd5102a
Binary files /dev/null and b/internal/server/web/static/fonts/jetbrains-mono-latin-wght-normal.woff2 differ
diff --git a/internal/server/web/static/style.css b/internal/server/web/static/style.css
new file mode 100644
index 0000000..1cc5325
--- /dev/null
+++ b/internal/server/web/static/style.css
@@ -0,0 +1,171 @@
+/* Inter and JetBrains Mono: SIL Open Font License 1.1, see fonts/OFL-*.txt. */
+@font-face {
+  font-family: "Inter"; font-style: normal; font-weight: 100 900; font-display: swap;
+  src: url(fonts/inter-latin-wght-normal.woff2) format("woff2");
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: "Inter"; font-style: normal; font-weight: 100 900; font-display: swap;
+  src: url(fonts/inter-cyrillic-wght-normal.woff2) format("woff2");
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+@font-face {
+  font-family: "Inter"; font-style: italic; font-weight: 100 900; font-display: swap;
+  src: url(fonts/inter-latin-wght-italic.woff2) format("woff2");
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: "Inter"; font-style: italic; font-weight: 100 900; font-display: swap;
+  src: url(fonts/inter-cyrillic-wght-italic.woff2) format("woff2");
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+@font-face {
+  font-family: "JetBrains Mono"; font-style: normal; font-weight: 100 800; font-display: swap;
+  src: url(fonts/jetbrains-mono-latin-wght-normal.woff2) format("woff2");
+  unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+@font-face {
+  font-family: "JetBrains Mono"; font-style: normal; font-weight: 100 800; font-display: swap;
+  src: url(fonts/jetbrains-mono-cyrillic-wght-normal.woff2) format("woff2");
+  unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;
+}
+
+/* Theme tokens. Light by default; dark from the system unless the cookie says light. */
+:root {
+  --bg: #ffffff;
+  --surface: #f6f7f9;
+  --text: #1c2026;
+  --muted: #5a636e;
+  --border: #e3e6ea;
+  --accent: #0b5fcc;
+  --accent-soft: #e8f0fc;
+  --focus: #0b5fcc;
+  color-scheme: light;
+}
+@media (prefers-color-scheme: dark) {
+  :root:not([data-theme="light"]) {
+    --bg: #0f1216;
+    --surface: #171b21;
+    --text: #e4e7eb;
+    --muted: #9aa3ae;
+    --border: #2a3038;
+    --accent: #79b4ff;
+    --accent-soft: #1a2636;
+    --focus: #79b4ff;
+    color-scheme: dark;
+  }
+}
+:root[data-theme="dark"] {
+  --bg: #0f1216;
+  --surface: #171b21;
+  --text: #e4e7eb;
+  --muted: #9aa3ae;
+  --border: #2a3038;
+  --accent: #79b4ff;
+  --accent-soft: #1a2636;
+  --focus: #79b4ff;
+  color-scheme: dark;
+}
+
+*, *::before, *::after { box-sizing: border-box; }
+html { -webkit-text-size-adjust: 100%; text-size-adjust: 100%; }
+body {
+  margin: 0;
+  background: var(--bg);
+  color: var(--text);
+  font: 400 1.0625rem/1.7 "Inter", system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
+  -webkit-font-smoothing: antialiased;
+}
+a { color: var(--accent); text-underline-offset: 0.18em; text-decoration-thickness: 1px; }
+a:hover { text-decoration-thickness: 2px; }
+:focus-visible { outline: 2px solid var(--focus); outline-offset: 2px; border-radius: 4px; }
+img { max-width: 100%; height: auto; }
+
+.skip { position: absolute; left: -9999px; top: 0.5rem; padding: 0.5rem 0.75rem; background: var(--bg); z-index: 10; }
+.skip:focus { left: 0.5rem; }
+
+/* Top bar: brand left, empty center, tools right. */
+.topbar {
+  display: flex; align-items: center; justify-content: space-between; gap: 1rem; flex-wrap: wrap;
+  max-width: 64rem; margin: 0 auto; padding: 1rem 1.25rem;
+  border-bottom: 1px solid var(--border);
+}
+.brand { display: inline-flex; align-items: center; gap: 0.6rem; color: var(--text); text-decoration: none; font-weight: 650; font-size: 1.125rem; letter-spacing: -0.01em; }
+.brand:hover span { text-decoration: underline; text-underline-offset: 0.2em; }
+.logo { display: block; flex: none; border-radius: 8px; }
+svg.logo { color: var(--text); }
+svg.logo path { stroke: var(--bg); }
+.tools, .prefs, .langs { display: flex; align-items: center; gap: 0.25rem; }
+.prefs { margin: 0; }
+.langs { margin: 0 0.25rem; padding: 2px; border: 1px solid var(--border); border-radius: 999px; }
+.tools button, .tools .icon {
+  display: inline-flex; align-items: center; justify-content: center;
+  min-width: 2.25rem; height: 2.25rem; padding: 0 0.5rem;
+  border: 0; border-radius: 999px; background: transparent; color: var(--muted);
+  font: inherit; font-size: 0.8125rem; font-weight: 600; letter-spacing: 0.02em; cursor: pointer; text-decoration: none;
+}
+.langs button { height: 1.875rem; min-width: 2.5rem; }
+.tools button:hover, .tools .icon:hover { color: var(--text); background: var(--surface); }
+.langs button[aria-pressed="true"] { background: var(--accent-soft); color: var(--accent); }
+
+/* One theme button is shown: the one that switches away from the current theme. */
+.to-light { display: none !important; }
+:root[data-theme="dark"] .to-light { display: inline-flex !important; }
+:root[data-theme="dark"] .to-dark { display: none !important; }
+@media (prefers-color-scheme: dark) {
+  :root:not([data-theme="light"]) .to-light { display: inline-flex !important; }
+  :root:not([data-theme="light"]) .to-dark { display: none !important; }
+}
+
+main { max-width: 44rem; margin: 0 auto; padding: 2.5rem 1.25rem 4rem; }
+
+/* Main page */
+.section-title { margin: 0 0 1.25rem; font-size: 0.8125rem; font-weight: 650; letter-spacing: 0.08em; text-transform: uppercase; color: var(--muted); }
+.card { padding: 1.25rem 0; border-top: 1px solid var(--border); }
+.card:first-of-type { border-top: 0; padding-top: 0; }
+.card h2 { margin: 0; font-size: 1.375rem; line-height: 1.3; font-weight: 650; letter-spacing: -0.015em; }
+.card h2 a { color: var(--text); text-decoration: none; }
+.card h2 a:hover { color: var(--accent); }
+.meta { margin: 0.35rem 0 0; color: var(--muted); font-size: 0.875rem; font-variant-numeric: tabular-nums; }
+.desc { margin: 0.5rem 0 0; }
+.empty { color: var(--muted); }
+.pager { display: grid; grid-template-columns: 1fr auto 1fr; align-items: center; gap: 1rem; margin-top: 2rem; padding-top: 1.25rem; border-top: 1px solid var(--border); }
+.pager a { text-decoration: none; font-weight: 600; }
+.pager [rel="next"] { justify-self: end; }
+
+/* Post page */
+.post > header h1 { margin: 0; font-size: clamp(1.875rem, 4vw + 1rem, 2.625rem); line-height: 1.15; font-weight: 700; letter-spacing: -0.025em; }
+.post > header .meta { margin-top: 0.75rem; }
+.cover { display: block; width: 100%; margin: 2rem 0 0; border-radius: 12px; }
+.prose { margin-top: 2rem; overflow-wrap: break-word; }
+.prose > :first-child { margin-top: 0; }
+.prose h2, .prose h3, .prose h4 { line-height: 1.3; letter-spacing: -0.015em; margin: 2.25rem 0 0.75rem; scroll-margin-top: 1rem; }
+.prose h2 { font-size: 1.5rem; font-weight: 650; }
+.prose h3 { font-size: 1.25rem; font-weight: 650; }
+.prose h4 { font-size: 1.0625rem; font-weight: 650; }
+.prose p, .prose ul, .prose ol, .prose blockquote, .prose table, .prose pre { margin: 0 0 1.25rem; }
+.prose li + li { margin-top: 0.35rem; }
+.prose blockquote { padding: 0.25rem 0 0.25rem 1rem; border-left: 3px solid var(--border); color: var(--muted); }
+.prose blockquote > :last-child { margin-bottom: 0; }
+.prose hr { border: 0; border-top: 1px solid var(--border); margin: 2.5rem 0; }
+.prose img { display: block; margin: 1.5rem auto; border-radius: 8px; }
+.prose table { display: block; overflow-x: auto; border-collapse: collapse; font-size: 0.9375rem; }
+.prose th, .prose td { padding: 0.5rem 0.75rem; border: 1px solid var(--border); text-align: left; }
+.prose th { background: var(--surface); font-weight: 600; }
+code, pre { font-family: "JetBrains Mono", ui-monospace, SFMono-Regular, Menlo, Consolas, monospace; font-variant-ligatures: none; tab-size: 4; }
+.prose :not(pre) > code { padding: 0.1em 0.35em; border-radius: 4px; background: var(--surface); font-size: 0.875em; }
+.prose pre { overflow-x: auto; padding: 1rem 1.125rem; border: 1px solid var(--border); border-radius: 10px; font-size: 0.875rem; line-height: 1.6; }
+.prose pre, .prose pre.chroma { background: var(--surface); }
+
+.error h1 { margin: 0 0 0.75rem; font-size: 2rem; letter-spacing: -0.02em; }
+
+@media (max-width: 30rem) {
+  .topbar { padding: 0.75rem 1rem; }
+  main { padding: 1.75rem 1rem 3rem; }
+  .brand span { font-size: 1rem; }
+}
+@media (prefers-reduced-motion: no-preference) {
+  html { scroll-behavior: smooth; }
+}
+
+/* Code highlighting (chroma) is appended below at startup. */
diff --git a/internal/server/web/templates/error.html b/internal/server/web/templates/error.html
new file mode 100644
index 0000000..2782638
--- /dev/null
+++ b/internal/server/web/templates/error.html
@@ -0,0 +1,8 @@
+{{define "title"}}{{t .Title}} — {{.Site.Name}}{{end}}
+{{define "main"}}
+<section class="error">
+  <h1>{{t .Title}}</h1>
+  <p>{{t .Text}}</p>
+  <p><a href="/">{{t "back_home"}}</a></p>
+</section>
+{{end}}
diff --git a/internal/server/web/templates/home.html b/internal/server/web/templates/home.html
new file mode 100644
index 0000000..cd28038
--- /dev/null
+++ b/internal/server/web/templates/home.html
@@ -0,0 +1,22 @@
+{{define "title"}}{{.Site.Name}}{{if gt .Page 1}} — {{t "page_of" "n" .Page "m" .Pages}}{{end}}{{end}}
+{{define "main"}}
+<section aria-labelledby="newest">
+  <h1 id="newest" class="section-title">{{t "newest"}}</h1>
+  {{- range .Posts}}
+  <article class="card">
+    <h2><a href="/posts/{{.Slug}}">{{.Title}}</a></h2>
+    <p class="meta">{{template "date" .Date}} · {{t "min_read" "n" (minutes .Words)}}</p>
+    {{- with .Description}}<p class="desc">{{.}}</p>{{end}}
+  </article>
+  {{- else}}
+  <p class="empty">{{t "no_posts"}}</p>
+  {{- end}}
+</section>
+{{- if gt .Pages 1}}
+<nav class="pager" aria-label="{{t "pages"}}">
+  {{- if gt .Page 1}}<a rel="prev" href="{{if eq .Page 2}}/{{else}}/?page={{add .Page -1}}{{end}}">← {{t "newer"}}</a>{{else}}<span></span>{{end}}
+  <span class="meta">{{t "page_of" "n" .Page "m" .Pages}}</span>
+  {{- if lt .Page .Pages}}<a rel="next" href="/?page={{add .Page 1}}">{{t "older"}} →</a>{{else}}<span></span>{{end}}
+</nav>
+{{- end}}
+{{end}}
diff --git a/internal/server/web/templates/layout.html b/internal/server/web/templates/layout.html
new file mode 100644
index 0000000..2be7447
--- /dev/null
+++ b/internal/server/web/templates/layout.html
@@ -0,0 +1,39 @@
+<!doctype html>
+<html lang="{{.DocLang}}"{{with .Theme}} data-theme="{{.}}"{{end}}>
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="color-scheme" content="{{with .Theme}}{{.}}{{else}}light dark{{end}}">
+<title>{{block "title" .}}{{.Site.Name}}{{end}}</title>
+<link rel="stylesheet" href="{{.CSS}}">
+</head>
+<body>
+<a class="skip" href="#main" lang="{{.Lang}}">{{t "skip"}}</a>
+<header class="topbar" lang="{{.Lang}}">
+  <a class="brand" href="/" aria-label="{{.Site.Name}} — {{t "home"}}">
+    {{- if .Site.Logo}}<img class="logo" src="/assets/logo.svg" alt="" width="28" height="28">
+    {{- else}}<svg class="logo" viewBox="0 0 32 32" width="28" height="28" aria-hidden="true"><rect width="32" height="32" rx="8" fill="currentColor"/><path d="M10 8v16M22 8v16M10 16h12" stroke-width="3" stroke-linecap="round"/></svg>
+    {{- end}}<span>{{.Site.Name}}</span>
+  </a>
+  <nav class="tools" aria-label="{{t "settings"}}">
+    <form method="post" action="/prefs" class="prefs">
+      <input type="hidden" name="back" value="{{.Path}}">
+      <button class="icon to-dark" name="theme" value="dark" title="{{t "to_dark"}}" aria-label="{{t "to_dark"}}"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true"><path d="M20 14.5A8 8 0 0 1 9.5 4a8 8 0 1 0 10.5 10.5Z" fill="none" stroke="currentColor" stroke-width="2" stroke-linejoin="round"/></svg></button>
+      <button class="icon to-light" name="theme" value="light" title="{{t "to_light"}}" aria-label="{{t "to_light"}}"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true"><circle cx="12" cy="12" r="4" fill="none" stroke="currentColor" stroke-width="2"/><path d="M12 2v2M12 20v2M2 12h2M20 12h2M4.9 4.9l1.4 1.4M17.7 17.7l1.4 1.4M4.9 19.1l1.4-1.4M17.7 6.3l1.4-1.4" stroke="currentColor" stroke-width="2" stroke-linecap="round"/></svg></button>
+      <span class="langs" role="group" aria-label="{{t "language"}}">
+        <button name="lang" value="en" lang="en" aria-pressed="{{eq .Lang "en"}}">EN</button>
+        <button name="lang" value="ru" lang="ru" aria-pressed="{{eq .Lang "ru"}}">RU</button>
+      </span>
+    </form>
+    <a class="icon" href="/rss.xml" title="{{t "rss"}}" aria-label="{{t "rss"}}"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true"><path d="M5 11a8 8 0 0 1 8 8M5 5a14 14 0 0 1 14 14" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"/><circle cx="6" cy="18" r="1.5" fill="currentColor"/></svg></a>
+    {{- with .Site.GitHub}}
+    <a class="icon" href="{{.}}" rel="noopener noreferrer me" title="{{t "github"}}" aria-label="{{t "github"}}"><svg viewBox="0 0 24 24" width="20" height="20" aria-hidden="true"><path fill="currentColor" d="M12 2a10 10 0 0 0-3.2 19.5c.5.1.7-.2.7-.5v-1.7c-2.8.6-3.4-1.3-3.4-1.3-.4-1.2-1.1-1.5-1.1-1.5-.9-.6.1-.6.1-.6 1 .1 1.5 1 1.5 1 .9 1.6 2.4 1.1 3 .9.1-.7.4-1.1.6-1.4-2.2-.3-4.6-1.1-4.6-5a3.9 3.9 0 0 1 1-2.7 3.6 3.6 0 0 1 .1-2.7s.8-.3 2.8 1a9.6 9.6 0 0 1 5 0c1.9-1.3 2.8-1 2.8-1 .5 1.4.2 2.4.1 2.7a3.9 3.9 0 0 1 1 2.7c0 3.9-2.4 4.7-4.6 5 .4.3.7.9.7 1.9v2.8c0 .3.2.6.7.5A10 10 0 0 0 12 2Z"/></svg></a>
+    {{- end}}
+  </nav>
+</header>
+<main id="main">
+{{block "main" .}}{{end}}
+</main>
+</body>
+</html>
+{{define "date"}}<time datetime="{{.Format "2006-01-02"}}">{{date .}}</time>{{end}}
diff --git a/internal/server/web/templates/post.html b/internal/server/web/templates/post.html
new file mode 100644
index 0000000..9bdf61f
--- /dev/null
+++ b/internal/server/web/templates/post.html
@@ -0,0 +1,17 @@
+{{define "title"}}{{.Post.Title}} — {{.Site.Name}}{{end}}
+{{define "main"}}
+<article class="post">
+  <header>
+    <h1>{{.Post.Title}}</h1>
+    <p class="meta">{{template "date" .Post.Date}}
+      {{- if not .Post.Updated.IsZero}} · {{t "updated" "date" (date .Post.Updated)}}{{end}}
+      · {{t "min_read" "n" (minutes .Post.Words)}}</p>
+  </header>
+  {{- with .Post.Cover}}
+  <img class="cover" src="{{asset .}}" alt="">
+  {{- end}}
+  <div class="prose">
+{{.Post.HTML}}
+  </div>
+</article>
+{{end}}
diff --git a/internal/syncer/syncer.go b/internal/syncer/syncer.go
index d798f0f..4905e0d 100644
--- a/internal/syncer/syncer.go
+++ b/internal/syncer/syncer.go
@@ -15,6 +15,9 @@ import (
 
 const fetchTimeout = 5 * time.Minute
 
+// LogoKey is the optional site logo; Caddy serves it as /assets/logo.svg.
+const LogoKey = "assets/logo.svg"
+
 // Options holds the limits from the config.
 type Options struct {
 	PollInterval  time.Duration
@@ -231,7 +234,9 @@ func (s *Syncer) rebuild() {
 		}
 	}
 	s.cache = next
-	s.index.Store(content.NewIndex(posts, s.rlog))
+	ix := content.NewIndex(posts, s.rlog)
+	_, ix.Logo = s.mirror.State()[LogoKey]
+	s.index.Store(ix)
 }
 
 func (s *Syncer) parse(key string) *content.Post {
diff --git a/internal/syncer/syncer_test.go b/internal/syncer/syncer_test.go
index 4ec8a5e..06c14f5 100644
--- a/internal/syncer/syncer_test.go
+++ b/internal/syncer/syncer_test.go
@@ -117,6 +117,9 @@ func TestSync(t *testing.T) {
 	if got := slugs(s); !slices.Equal(got, []string{"one", "two"}) {
 		t.Fatalf("slugs = %v", got)
 	}
+	if s.Index().Logo {
+		t.Error("Logo without assets/logo.svg")
+	}
 	for _, f := range []string{"one.md", "deep/folder/two.md", "broken.md", "assets/img/a.png", mirror.StateFile} {
 		if _, err := os.Stat(filepath.Join(dir, f)); err != nil {
 			t.Errorf("missing %s: %v", f, err)
@@ -134,7 +137,8 @@ func TestSync(t *testing.T) {
 		t.Fatalf("second sync: err %v, gets %d → %d", err, gets, b.gets)
 	}
 
-	// Update, delete, fix the broken post.
+	// Update, delete, fix the broken post, add a logo.
+	b.set(LogoKey, "e1", "<svg/>")
 	b.set("one.md", "e2", post("One v2", "one"))
 	b.set("broken.md", "e2", post("Fixed", "fixed"))
 	delete(b.objs, "deep/folder/two.md")
@@ -147,6 +151,9 @@ func TestSync(t *testing.T) {
 	if s.Index().Get("one").Title != "One v2" {
 		t.Error("one.md not updated")
 	}
+	if !s.Index().Logo {
+		t.Error("Logo not set after assets/logo.svg appeared")
+	}
 	if _, err := os.Stat(filepath.Join(dir, "deep/folder/two.md")); err == nil {
 		t.Error("deleted object still on disk")
 	}
diff --git a/main.go b/main.go
index b937ca4..5c4dfe5 100644
--- a/main.go
+++ b/main.go
@@ -60,7 +60,7 @@ func run() int {
 	httpLog := log.With("component", "http")
 	srv := &http.Server{
 		Addr:              addr,
-		Handler:           server.New(httpLog, cfg, &ready, syn.Sync),
+		Handler:           server.New(httpLog, cfg, &ready, syn.Sync, syn.Index),
 		ReadHeaderTimeout: 5 * time.Second,
 		ReadTimeout:       10 * time.Second,
 		WriteTimeout:      30 * time.Second,