Running a static website on a Digital Ocean droplet with all traffic redirected to https using Let’s Encrypt. If I want to enable visitors to subscribe or unsubscribe from a newsletter while keeping the website entirely static, what are the downsides to this approach:
Create an HTML form that collects the email address, with actions of
https://example.com/subscribe.html?email=johndoe@email.com
https://example.com/unsubscribe.html?email=johndoe@email.com
https://example.com/gpdr.html?email=johndoe@email.com
My web logs are scheduled to rotate daily and I have a scheduled task that will scp into the server and pull down the log file from the previous day. I can then just parse the log files locally to maintain my active list of subscribers and respond to gpdr requests. The email address is encrypted in transit because of the https connection, and I can maintain a very basic server that has only nginx running and only ports 22, 80, and 443 open. Right? It’s just a one-person website and I am the only one with access to the logs, which I destroy after a set period of time anyway.