Locking Down SSH in a DMZ for Hugo Deployments
Hardening SSH access to a DMZ web server revealed an overlooked dependency in my Hugo deployment pipeline: the server also needs outbound SSH to pull from Git.
Hugo
Self-Hosted Hugo Comments with Private Gitea
How I built a secure, self-hosted comment system for Hugo using private Gitea as the backend, proxied safely through Nginx.
Automating Hugo Deployments with hillpush (Git-Based Workflow)
How this site is published: a small helper script commits and pushes to a self-hosted Gitea, and a build host in the DMZ pulls, rebuilds and syncs the site. Includes what I learned rebuilding it after losing the Git server.