/* Self-hosted from Google Fonts, latin subset only.
 *
 * frontend/nginx.conf sets `font-src 'self'`, so an external font host
 * is blocked outright. Self-hosting also keeps the sign-on page intact
 * in an air-gapped install, and stops leaking every visitor's IP to a
 * third party before they have even signed in. */
@font-face { font-family: 'Bebas Neue'; font-style: normal; font-weight: 400;
  font-display: swap; src: url('/fonts/bebas-neue-400.woff2') format('woff2'); }
@font-face { font-family: 'IBM Plex Mono'; font-style: normal; font-weight: 400;
  font-display: swap; src: url('/fonts/ibm-plex-mono-400.woff2') format('woff2'); }
@font-face { font-family: 'IBM Plex Mono'; font-style: normal; font-weight: 500;
  font-display: swap; src: url('/fonts/ibm-plex-mono-500.woff2') format('woff2'); }
@font-face { font-family: 'IBM Plex Mono'; font-style: normal; font-weight: 600;
  font-display: swap; src: url('/fonts/ibm-plex-mono-600.woff2') format('woff2'); }