Hugo Nginx

Wed, 22 Apr 2026 18:22:57 +0800

nginx cfg

 location /webhook/ {
allow 140.82.112.0/20;
allow 192.30.252.0/22;
allow 185.199.108.0/22;
allow 127.0.0.1;
deny all;
proxy_pass http://127.0.0.1:9000/hooks/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_read_timeout 120s;
proxy_buffering off;
}

 location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2|ttf|eot|webp)$ {
expires 30d;
add_header Cache-Control "public, immutable";
log_not_found off;
access_log off;
}
location ~* \.(html|htm|xml|txt|json)$ {
expires 1h;
add_header Cache-Control "public";
}
location ~ /\. {
deny all;
access_log off;
log_not_found off;
}
location ~* \.(sql|bak|backup|sh|log|ini|conf|yml|yaml|md)$ {
deny all;
return 404;
}

/etc/systemd/system/webhook.service

[Unit]
Description=Webhook Service
After=network.target
[Service]
Type=simple
User=root
Group=root
ExecStart=/usr/local/bin/webhook -ip 127.0.0.1 -port 9000 -hooks /etc/webhook/hooks.json -verbose
Restart=always
RestartSec=5
[Install]
WantedBy=multi-user.target

deploy

#!/bin/bash
SOURCE_DIR="/home/anthony/blog-source"
WEB_DIR="/var/www/blog"
LOG_FILE="/var/log/webhook/deploy.log"
echo "$(date): ========== start deploy ==========" >> $LOG_FILE
cd $SOURCE_DIR || {
echo "$(date): ERROR: cannot enter $SOURCE_DIR" >> $LOG_FILE
exit 1
}
echo "$(date): fetching remote updates" >> $LOG_FILE
git fetch origin >> $LOG_FILE 2>&1
echo "$(date): force sync with remote main branch" >> $LOG_FILE
git reset --hard origin/main >> $LOG_FILE 2>&1
echo "$(date): updating submodules" >> $LOG_FILE
git submodule update --init --recursive >> $LOG_FILE 2>&1
echo "$(date): generating static files" >> $LOG_FILE
hugo --destination $WEB_DIR --minify -D >> $LOG_FILE 2>&1
echo "$(date): setting permissions" >> $LOG_FILE
chmod -R 755 $WEB_DIR >> $LOG_FILE 2>&1

webhook

Tue, 21 Apr 2026 16:34:56 +0800

webhook status

sudo systemctl daemon-reload

sudo systemctl restart webhook

sudo systemctl status webhook

sudo netstat -tlnp | grep webhook

webhook.service

vi /etc/systemd/system/webhook.service

deploy.sh

vi /usr/local/bin/deploy.sh

log

tail -f /var/log/webhook/deploy.log

Blog on Anthony

Hugo Nginx

nginx cfg

/etc/systemd/system/webhook.service

deploy

webhook

webhook status

webhook.service

deploy.sh

log