Initial Setup

Notes on setting up the blog

Subdomain

Created the subdomain by going into Subdomain Management in the DirectAdmin control panel. Added the blog subdomain.

SSL Certificate

Created the SSL certificate by going into SSL Certificates in the DirectAdmin control panel. Selected Get automatic certificate from ACME Provider and chose Let’s Encrypt as the ACME provider. Under Certificate Entries chose blog.steveandmimi.com, mail.steveandmimi.com, steveandmimi.com, and www.steveandmimi.com. Clicked SAVE and the certificate was generated and installed.

GitHub Workflow

I set up a GitHub workflow to build and deploy the site whenever changes are pushed. I created an SSH key in Hostrocket’s web control panel. After creating it I had to authorize it by clicking the checkbox next to the key name then selecting ‘Authorize’. Looking back at the Create SSH Key dialog I see there’s an “Authorize” checkbox. I should have checked that.

I created repository secrets for the host, port, user, path, and key. (The key is the private ssh key.)

In GitHub I created a Personal Access Token called “Hugo deploy” in Settings that has fine-grained access to the SSteve/blog repository. It expires on Dec 21, 2023. There’s a “Regenerate token” button on the token page so I guess I can use that when the token expires. It is in the Actions Secrets with the name “TOKEN”. The instructions for doing that came from this blog post.

This is the workflow file:

name: Hugo
on: 
    push:
        branches:
            - main
jobs:
    deploy:
        runs-on: ubuntu-latest
        steps:
            - name: Git checkout
              uses: actions/checkout@v3
              
            - name: Set up Hugo
              uses: peaceiris/actions-hugo@v2
              with:
                hugo-version: 'latest'
                extended: true
                
            - name: Build
              run: hugo --minify
              
            - name: rsync deployment
              uses: burnett01/rsync-deployments@5.2.1
              with:
                switches: -avzr --delete --exclude="" --include="" --filter=""
                path: public/
                remote_path: ${{ secrets.DEPLOY_PATH }}
                remote_host: ${{ secrets.DEPLOY_HOST }}
                remote_port: ${{ secrets.DEPLOY_PORT }}
                remote_user: ${{ secrets.DEPLOY_USER }}
                remote_key: ${{ secrets.DEPLOY_KEY }}
                
            - name: Display status from deploy
              run: echo "${{ steps.deploy.outputs.status }}"