Hugo + GitHub Webhook 博客搭建教程

# 添加 openresty yum 源
wget https://openresty.org/package/centos/openresty.repo
sudo mv openresty.repo /etc/yum.repos.d/
# 更新 yum 源
sudo yum check-update
# 安装 openresty
sudo yum install -y openresty

# 检查 nginx 配置是否正确
/usr/local/openresty/nginx/sbin/nginx -t
# 检查并重新载入 nginx 配置
/usr/local/openresty/nginx/sbin/nginx -s reload

# 下载证书申请工具
wget https://dl.eff.org/certbot-auto
chmod +x certbot-auto
# 移动程序到自己喜欢的位置
mkdir /var/opt/letsencrypt/
mv certbot-auto /var/opt/letsencrypt/letsencrypt-auto

# 执行申请，-d 参数内容应该替换为你自己的域名，这里使用DNS的方式进行校验
/var/opt/letsencrypt/letsencrypt-auto certonly --preferred-challenges dns --manual -d "*.rickchen.info" --server "https://acme-v02.api.letsencrypt.org/directory"

# Are you OK with your IP being logged? 这个问题直接填入Yes
# 随后程序会提示要求在自己域名下面添加一条TXT类型的解析记录，按照提示在自己的域名运营商后台操作即可


# 稍等片刻（我等了5分钟左右让域名解析生效）之后按下回车即可完成申请

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/rickchen.info/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/rickchen.info/privkey.pem
   Your cert will expire on 2020-12-10. To obtain a new or tweaked
   version of this certificate in the future, simply run
   letsencrypt-auto again. To non-interactively renew *all* of your
   certificates, run "letsencrypt-auto renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le

server {
    listen       443 ssl;
    server_name  blog.rickchen.info;

    ssl_stapling on; 
    ssl_stapling_verify on; 
    ssl_trusted_certificate /etc/letsencrypt/live/rickchen.info/fullchain.pem;
    ssl_certificate      /etc/letsencrypt/live/rickchen.info/fullchain.pem;
    ssl_certificate_key  /etc/letsencrypt/live/rickchen.info/privkey.pem;

    # 后续配置省略...
}

post_hook = /usr/local/nginx/sbin/nginx -s reload

# 每天凌晨2点检查并续期HTTPS证书
0 2 * * * root /var/opt/letsencrypt/letsencrypt-auto renew -q > /dev/null 2>&1 &

# 注意替换成最新的版本链接，编写本文时最新的版本为0.74.3
wget "https://github.com/gohugoio/hugo/releases/download/v0.74.3/hugo_0.74.3_Linux-64bit.tar.gz"
# 解压
tar -zxvf hugo_0.74.3_Linux-64bit.tar.gz -C .
mv hugo /usr/local/bin/

mkdir /var/www/blog

groupadd blog
usradd blog -g blog
chown -R blog:blog /var/www/blog/ 

# 仓库克隆
git clone git@github.com:chency147/blog.git
# 初始化博客
hugo new site blog
# 进入目录
cd blog

ssh-keygen
# 一路回车到底
cat ~/.ssh/id_rsa.pub
# cat 指令输出即为公钥内容

hugo new post/hello-world.md
git add -A
git commit -m "Hello World"
git push -u origin master

cd /var/www/blog
git clone git@github.com:chency147/blog.git .
git submodule init
git submodule update
hugo -D

wget "https://github.com/adnanh/webhook/releases/download/2.7.0/webhook-linux-amd64.tar.gz"
tar -zxvf webhook-linux-amd64.tar.gz -C .
mv webhook-linux-amd64/webhook /usr/local/bin/

#!/bin/bash
cd /var/www/blog
git checkout master
git pull
git submodule init
git submodule update
hugo -D

[
  {
    "id": "blog_deploy",
    "execute-command": "/var/www/blog_deploy.sh",
    "command-working-directory": "/var/www/blog",
    "trigger-rule":
    {
      "and":
      [
        {
          "match":
          {
            "type": "payload-hash-sha1",
            "secret": "这里填写你自己在GitHub WebHook配置页面上填写的密码",
            "parameter":
            {
              "source": "header",
              "name": "X-Hub-Signature"
            }
          }
        },
        {
          "match":
          {
            "type": "value",
            "value": "refs/heads/master",
            "parameter":
            {
              "source": "payload",
              "name": "ref"
            }
          }
        }
      ]
    }
  }
]

nohup webhook -port 9001 -ip 127.0.0.1 -hooks /etc/webhook/hooks.json > /dev/null 2>&1 &

[program:WebHook]
command = webhook -port 9001 -ip 127.0.0.1 -hooks /etc/webhook/hooks.json
autorestart = true
autostart = true
startretries = 2
numprocs = 1
stderr_logfile = /dev/null
stdout_logfile = /dev/null
stopsignal = KILL
stopsignal = INT
user = blog

location ~ ^/XXXXXXXX/webhook/(.*) {
    proxy_pass http://127.0.0.1:9001/$1;
}

#!/bin/bash
# 博客文件拉取
cd /var/www/blog
git checkout master
git pull
git submodule init
git submodule update

# 获取编译结果
result=`hugo -D`
# 使用server酱进行通知
secret="Server酱官网获取到SCKEY"
# 标题、内容 URL编码
title=$(echo -e "Rick Chen Blog 更新完毕" | od -An -tx1 | tr ' ' % | xargs printf "%s")
content="以下为执行博客渲染指令输出内容\n\`\`\`\n${result}\n\`\`\`\n时间："`date "+%Y-%m-%d %H:%M:%S"`
content=$(echo -e "${content}" | od -An -tx1 | tr ' ' % | xargs printf "%s")
curl "https://sc.ftqq.com/${secret}.send?text=${title}&desp=${content}"