# 1. 初始化仓库
git init
git add .
git commit -m "Initial site"

# 2. 推送到 GitHub
git remote add origin https://github.com/username/username.github.io.git
git push -u origin main

# 3. GitHub 自动构建
# 访问 https://username.github.io

# .github/workflows/jekyll.yml
name: Deploy Jekyll Site

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

permissions:
  contents: read
  pages: write
  id-token: write

concurrency:
  group: "pages"
  cancel-in-progress: false

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Setup Ruby
        uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true

      - name: Setup Pages
        id: pages
        uses: actions/configure-pages@v4

      - name: Build with Jekyll
        run: bundle exec jekyll build --baseurl "${{ steps.pages.outputs.base_path }}"
        env:
          JEKYLL_ENV: production

      - name: Upload artifact
        uses: actions/upload-pages-artifact@v3

  deploy:
    environment:
      name: github-pages
      url: ${{ steps.deployment.outputs.page_url }}
    runs-on: ubuntu-latest
    needs: build
    steps:
      - name: Deploy to GitHub Pages
        id: deployment
        uses: actions/deploy-pages@v4

# 1. 在仓库根目录创建 CNAME 文件
echo "blog.example.com" > CNAME

# 2. DNS 配置（A 记录）
# 185.199.108.153
# 185.199.109.153
# 185.199.110.153
# 185.199.111.153

# 3. 或 CNAME 记录
# blog.example.com → username.github.io

# netlify.toml
[build]
  command = "jekyll build"
  publish = "_site"

[build.environment]
  RUBY_VERSION = "3.2.2"
  JEKYLL_ENV = "production"

# 重定向规则
[[redirects]]
  from = "/old-page"
  to = "/new-page"
  status = 301

# 自定义域名 + HTTPS（Netlify 自动配置）
# 在 Netlify 控制面板中添加自定义域名

# Headers 配置
[[headers]]
  for = "/*"
  [headers.values]
    X-Frame-Options = "DENY"
    X-XSS-Protection = "1; mode=block"
    Referrer-Policy = "strict-origin-when-cross-origin"
    Cache-Control = "public, max-age=3600"

[[headers]]
  for = "/assets/*"
  [headers.values]
    Cache-Control = "public, max-age=31536000, immutable"

{
  "buildCommand": "jekyll build",
  "outputDirectory": "_site",
  "installCommand": "bundle install",
  "framework": null
}

# 1. 安装 Vercel CLI
npm i -g vercel

# 2. 登录
vercel login

# 3. 部署
vercel

# 4. 生产部署
vercel --prod

# /etc/nginx/sites-available/my-jekyll-site
server {
    listen 80;
    server_name blog.example.com;
    root /var/www/jekyll-site;
    index index.html;

    # 开启 gzip 压缩
    gzip on;
    gzip_types text/plain text/css application/json application/javascript text/xml application/xml text/javascript;
    gzip_min_length 256;

    # 静态资源缓存
    location ~* \.(css|js|jpg|jpeg|png|gif|ico|svg|woff|woff2)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
    }

    # HTML 不缓存（保证内容更新）
    location ~* \.html$ {
        expires 1h;
        add_header Cache-Control "public, must-revalidate";
    }

    # 自定义 404
    error_page 404 /404.html;
    location = /404.html {
        internal;
    }

    # 安全头
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-XSS-Protection "1; mode=block" always;

    # 处理永久链接（去掉 .html 后缀）
    location / {
        try_files $uri $uri.html $uri/ =404;
    }
}

#!/bin/bash
# deploy.sh

set -e

SITE_DIR="/var/www/jekyll-site"
BUILD_DIR="/tmp/jekyll-build"
REPO_DIR="/opt/jekyll-site"

echo "📦 Pulling latest changes..."
cd "$REPO_DIR"
git pull origin main

echo "🔧 Installing dependencies..."
bundle install --deployment --without development

echo "🏗️ Building site..."
JEKYLL_ENV=production bundle exec jekyll build --destination "$BUILD_DIR"

echo "🚀 Deploying..."
rsync -avz --delete "$BUILD_DIR/" "$SITE_DIR/"

echo "🔄 Reloading Nginx..."
sudo systemctl reload nginx

echo "✅ Deploy complete!"

# /etc/systemd/system/jekyll-build.service
[Unit]
Description=Jekyll Site Build
After=network.target

[Service]
Type=oneshot
User=jekyll
WorkingDirectory=/opt/jekyll-site
ExecStart=/opt/jekyll-site/deploy.sh

# /etc/systemd/system/jekyll-build.timer
[Unit]
Description=Run Jekyll build every hour

[Timer]
OnCalendar=hourly
Persistent=true

[Install]
WantedBy=timers.target

# .github/workflows/ci-cd.yml
name: CI/CD Pipeline

on:
  push:
    branches: [main]
  pull_request:
    branches: [main]

jobs:
  # 代码检查
  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true
      - name: HTMLProofer check
        run: |
          bundle exec jekyll build
          bundle exec htmlproofer ./_site --disable-external --allow-hash-href

  # 构建测试
  build:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        ruby-version: ['3.1', '3.2', '3.3']
    steps:
      - uses: actions/checkout@v4
      - uses: ruby/setup-ruby@v1
        with:
          ruby-version: ${{ matrix.ruby-version }}
          bundler-cache: true
      - name: Build
        run: bundle exec jekyll build
      - name: Test output
        run: |
          test -f _site/index.html
          test -d _site/assets

  # 部署（仅 main 分支）
  deploy:
    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
    needs: [lint, build]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: ruby/setup-ruby@v1
        with:
          ruby-version: '3.2'
          bundler-cache: true
      - name: Build
        run: JEKYLL_ENV=production bundle exec jekyll build
      - name: Deploy to Netlify
        uses: nwtgck/actions-netlify@v2
        with:
          publish-dir: './_site'
          production-branch: main
          github-token: ${{ secrets.GITHUB_TOKEN }}
          deploy-message: "Deploy from GitHub Actions"
        env:
          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
          NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}

# .gitlab-ci.yml
image: ruby:3.2

cache:
  paths:
    - vendor/

before_script:
  - bundle install --path vendor

stages:
  - build
  - deploy

build:
  stage: build
  script:
    - bundle exec jekyll build --destination ./public
  artifacts:
    paths:
      - public

pages:
  stage: deploy
  script:
    - echo "Deploying to GitLab Pages"
  artifacts:
    paths:
      - public
  only:
    - main

# 安装 Certbot
sudo apt install certbot python3-certbot-nginx

# 获取证书
sudo certbot --nginx -d blog.example.com

# 自动续期
sudo certbot renew --dry-run

## 部署前检查

- [ ] `bundle exec jekyll build` 无错误
- [ ] `bundle exec jekyll serve` 本地预览正常
- [ ] 所有链接有效（htmlproofer 检查）
- [ ] 图片路径正确（使用 `relative_url` 过滤器）
- [ ] `baseurl` 配置正确
- [ ] `_config.yml` 中 `url` 设置为生产域名
- [ ] `JEKYLL_ENV=production`
- [ ] SEO 元标签完整
- [ ] sitemap.xml 可访问
- [ ] robots.txt 配置正确
- [ ] HTTPS 正常工作
- [ ] 自定义域名 DNS 已配置
- [ ] 404 页面正常显示