Overview

This blog is built using the Hugo static site generator and automatically deployed to an Oracle Cloud Infrastructure (OCI) Free Tier server via GitHub Actions.

Architecture

Write Markdown locally
    ↓
GitHub Push (main branch)
    ↓
GitHub Actions (Hugo build)
    ↓
SSH + rsync deployment
    ↓
OCI Server (Nginx)
    ↓
https://blog.fcoinfup.com

Tech Stack

Configuration Management

The project centrally manages settings through the .blogrc.yaml file.

server:
  host: oci-yarang-ec1.fcoinfup.com
  user: ubuntu
  deploy_path: /var/www/blog

blog:
  url: https://blog.fcoinfup.com
  title: "Yarang's Tech Lair"
  author: yarang

GitHub Secrets synchronization is automated through the scripts/sync-secrets.sh script.

Deployment Pipeline

The GitHub Actions workflow executes in the following steps:

1. Checkout: Clone repository (including submodules)
2. Hugo Setup: Install Hugo extended version
3. Build: Run hugo --minify
4. Deploy: Transfer to OCI server via rsync

# .github/workflows/deploy.yml
- name: Deploy to OCI server
  run: |
    rsync -avz --delete \
      -e "ssh -i ~/.ssh/deploy_key" \
      public/ \
      ${{ secrets.OCI_USER }}@${{ secrets.OCI_HOST }}:${{ secrets.OCI_DEPLOY_PATH }}

Post Writing Workflow

# Create new post
hugo new content/posts/my-new-post.md

# Local preview
hugo server -D

# Commit and push (auto deploy)
git add .
git commit -m "Add new post"
git push

Security Considerations

• SSH keys use ED25519 algorithm
• Private keys are securely stored in GitHub Secrets
• Nginx security header configuration (X-Frame-Options, X-Content-Type-Options, etc.)

References

• Hugo Official Documentation
• GitHub Actions Documentation
• PaperMod Theme

Korean Version: 한국어 버전