static: use local fonts
*: add Disqus comments to blog
srv: ssl: update content security policy