ahmza
1ad79d40d8
Use caddy-cf image with Cloudflare DNS-01 challenge
...
Switch the Caddy doc to the custom caddy-cf image
(ghcr.io/ahmzaa/caddy-cf) which bundles the Cloudflare DNS module, so
TLS certs are issued via the ACME DNS-01 challenge instead of HTTP-01.
This removes the need to expose ports 80/443 to the public internet,
which suits the Netbird-only infrastructure.
- Add (cloudflare) snippet + import cloudflare to both Caddyfiles
- Read CF_API_TOKEN from env (.env for Docker, Secret for K8s)
- Document token scope (Zone:DNS:Edit) and Cloudflare-hosted DNS
requirement
- Validated Caddyfile against the caddy-cf image (caddy adapt)
2026-07-25 01:17:35 +01:00
ahmza
7d4f1668a6
Add Caddy reverse proxy documentation
...
Document running Caddy in front of the SWS origin for both deployment
targets (Docker Compose on Gimli and the Kubernetes Pi cluster), with
Caddy handling automatic HTTPS, compression, and security headers.
Explains the layer separation: SWS serves static files + Cache-Control,
Caddy owns TLS/compression/security headers (matching sws.toml where
those are disabled). Caddyfile validated with 'caddy validate'.
2026-07-25 01:13:10 +01:00
ahmza
498231c160
Tune SWS config for running behind a reverse proxy
...
The site sits behind a reverse proxy that already handles compression
and security headers. Disable those in SWS to avoid redundant work and
duplicate/conflicting headers, letting each layer own one concern.
- compression / compression-static: off (proxy compresses)
- security-headers: off (proxy sets them)
- cache-control-headers, page-fallback, health: kept (origin concerns)
2026-07-25 01:09:42 +01:00
ahmza
898e3003a2
Switch static server from nginx to static-web-server
...
Replace nginx:alpine-slim with the scratch-based static-web-server
image, reducing the final image size ~32MB -> ~23MB (28% smaller).
- Dockerfile: serve from static-web-server:2, copy site to /public
- sws.toml: mirror previous nginx behavior (compression, cache-control,
SPA index fallback) plus security headers and /health endpoint
- Remove now-unused nginx.conf
2026-07-25 01:04:17 +01:00
ahmza
0d425c0ed1
Update .github/workflows/build-docker-images.yml
Build Hugo / build (push) Failing after 18m24s
Build Hugo / deploy (push) Has been cancelled
2026-03-06 01:31:33 +00:00
ahmza
cd6f85f903
Update .github/workflows/build-docker-images.yml
Build Hugo / build (push) Successful in 52s
Build Hugo / deploy (push) Failing after 1m14s
2026-03-06 00:58:29 +00:00
ahmza
0bef6a1907
Update .github/workflows/build-docker-images.yml
Build Hugo / build (push) Successful in 52s
Build Hugo / deploy (push) Failing after 56s
2026-03-06 00:52:33 +00:00
ahmza
83ca9b61b8
Update .github/workflows/build-docker-images.yml
Build Hugo / build (push) Successful in 54s
Build Hugo / deploy-to-gimli-blog (push) Has been cancelled
Build Hugo / deploy-to-rpic (push) Has been cancelled
2026-03-06 00:39:57 +00:00
ahmza
e9bcafb64b
Update Dockerfile
Build Hugo / build (push) Failing after 47s
Build Hugo / deploy-to-rpic (push) Has been skipped
Build Hugo / deploy-to-gimli-blog (push) Has been skipped
2026-03-06 00:36:04 +00:00
ahmza
2480790384
Update .github/workflows/build-docker-images.yml
Build Hugo / build (push) Failing after 37s
Build Hugo / deploy-to-rpic (push) Has been skipped
Build Hugo / deploy-to-gimli-blog (push) Has been skipped
2026-03-06 00:30:19 +00:00
ahmza
22d3759756
Update .github/workflows/build-docker-images.yml
Build Hugo / build (push) Failing after 8s
Build Hugo / deploy-to-rpic (push) Has been skipped
Build Hugo / deploy-to-gimli-blog (push) Has been skipped
2026-03-06 00:26:33 +00:00
ahmza
9a6555f1c3
Update .github/workflows/build-docker-images.yml
Build Hugo / build (push) Failing after 9s
Build Hugo / deploy-to-rpic (push) Has been skipped
Build Hugo / deploy-to-gimli-blog (push) Has been skipped
2026-03-06 00:24:26 +00:00
ahmza
d71dc7a86b
modified registry auth
2026-03-06 00:23:39 +00:00
ahmza
da5d05404f
whoknows
Build Hugo / build (push) Failing after 1m20s
Build Hugo / deploy-to-rpic (push) Has been skipped
Build Hugo / deploy-to-gimli-blog (push) Has been skipped
2026-02-15 23:42:18 +00:00
ahmza
3322229b97
Updated hardening-linux post
2026-02-15 23:41:22 +00:00
ahmza
1ccf4d3d72
added deployment to gimli
2026-02-12 23:14:20 +00:00
ahmza
a433830d1d
Remove DOCKER_BUILDKIT setting in workflow
...
Remove unnecessary environment variable setting for Docker Buildx.
2026-02-12 23:00:44 +00:00
ahmza
36dae5fdf7
added github actions cache
2026-02-12 22:58:17 +00:00
ahmza
ba646f28f1
Update ssh-action version in workflow file
2026-02-12 22:51:22 +00:00
ahmza
d0f304ef95
Update ssh-action version in deployment workflow
2026-02-12 22:43:50 +00:00
ahmza
311627d9c8
added deployment to gimli
2026-02-12 22:40:32 +00:00
ahmza
6d8f616bf0
added deployment to gimli
2026-02-12 22:39:40 +00:00
ahmza
4fb2156fa9
added image creation for linux/amd64
2026-02-12 22:01:27 +00:00
ahmza
12e43ef580
Update kubectl rollout command for blog deployment
2026-02-11 23:42:47 +00:00
ahmza
e9d8e0fdf6
updated action to use netbird for deployment
2026-02-11 23:20:54 +00:00
ahmza
e11a1adeb4
added mastodon verification
2026-02-11 22:17:31 +00:00
ahmza
cd493aa6d9
Merge pull request #3 from ahmzaa/my-hugo-workflow-post
...
new post
2025-06-13 11:46:46 +01:00
ahmza
ca83ea1081
Merge pull request #2 from ahmzaa/hardening-linux
...
erm, just some writing :D
2025-06-13 11:45:59 +01:00
ahmza
6cf5869dcc
merge back to main
2025-06-13 11:34:00 +01:00
ahmza
288c6c0d18
erm, just some writing :D
2025-06-13 11:05:18 +01:00
ahmza
cc8e11ca01
moved back to ssh key as it was giving auth error
2025-06-06 00:59:23 +01:00
ahmza
4385ec04f0
ing tailscale ssh instead of keys
2025-06-06 00:37:27 +01:00
ahmza
e57acb2fc5
changed ver of drone-ssh
2025-06-06 00:18:46 +01:00
ahmza
ae8b7a7439
changed the tailscale version in the gh action
2025-06-06 00:00:47 +01:00
ahmza
526f36669f
Adding a new post about Hardening Linux Systems and SSH
2025-06-06 00:00:18 +01:00
ahmza
4203f21813
who knows
2025-06-05 23:57:27 +01:00
ahmza
f847d71f35
added arrstack post
2025-05-10 14:16:33 +01:00
ahmza
e4fe59c622
updated blog archetype
2025-05-09 23:36:11 +01:00
ahmza
f124fa0524
updated the go dependencies
2025-05-09 23:29:04 +01:00
ahmza
098ca167cc
increased compression level, modified gzip response compression
2025-03-11 07:40:57 +00:00
ahmza
eaedda36c5
ls was for development, no longer needed
2025-03-11 07:39:18 +00:00
ahmza
1622b0ac03
disabled unsafe rendering until needed
2025-03-11 07:34:43 +00:00
ahmza
d330b229a3
further optimised hugo.toml and fixed error with image quality
2025-03-11 07:31:15 +00:00
ahmza
7a3cd39162
Optimised some text in posts
2025-03-11 07:28:18 +00:00
ahmza
60fa3602dd
Enabled image resampling
2025-03-11 07:20:40 +00:00
ahmza
ffca86b564
updated content
2025-03-11 07:16:59 +00:00
ahmza
03e29f1252
removed unnessecary tag
2025-02-13 12:59:43 +00:00
ahmza
f3a49c8b3c
renamed extended hearer and footer files
2025-02-13 12:59:31 +00:00
ahmza
db813edd8f
updated go.mod requirements
2025-02-13 12:59:10 +00:00
ahmza
cc33fe5a0b
Updated CV
2025-02-04 14:08:45 +00:00
ahmza