Hugo Nginx
nginx cfg location /webhook/ { allow 140.82.112.0/20; allow 192.30.252.0/22; allow 185.199.108.0/22; allow 127.0.0.1; deny all; proxy_pass http://127.0.0.1:9000/hooks/; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_read_timeout 120s; proxy_buffering off; } location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2|ttf|eot|webp)$ { expires 30d; add_header Cache-Control "public, immutable"; log_not_found off; access_log off; } location ~* \.(html|htm|xml|txt|json)$ { expires 1h; add_header Cache-Control "public"; } location ~ /\. { deny all; access_log off; log_not_found off; } location ~* \.(sql|bak|backup|sh|log|ini|conf|yml|yaml|md)$ { deny all; return 404; } /etc/systemd/system/webhook.service [Unit] Description=Webhook Service After=network.target [Service] Type=simple User=root Group=root ExecStart=/usr/local/bin/webhook -ip 127.0.0.1 -port 9000 -hooks /etc/webhook/hooks.json -verbose Restart=always RestartSec=5 [Install] WantedBy=multi-user.target deploy #!/bin/bash SOURCE_DIR="/home/anthony/blog-source" WEB_DIR="/var/www/blog" LOG_FILE="/var/log/webhook/deploy.log" echo "$(date): ========== start deploy ==========" >> $LOG_FILE cd $SOURCE_DIR || { echo "$(date): ERROR: cannot enter $SOURCE_DIR" >> $LOG_FILE exit 1 } echo "$(date): fetching remote updates" >> $LOG_FILE git fetch origin >> $LOG_FILE 2>&1 echo "$(date): force sync with remote main branch" >> $LOG_FILE git reset --hard origin/main >> $LOG_FILE 2>&1 echo "$(date): updating submodules" >> $LOG_FILE git submodule update --init --recursive >> $LOG_FILE 2>&1 echo "$(date): generating static files" >> $LOG_FILE hugo --destination $WEB_DIR --minify -D >> $LOG_FILE 2>&1 echo "$(date): setting permissions" >> $LOG_FILE chmod -R 755 $WEB_DIR >> $LOG_FILE 2>&1