git clone https://github.com/ysicing/play-ansible.git
cd play-ansible
# 安装ansible
./install.sh
# 编辑inventory.ini,添加节点ip(已配置ssh信任登录)
# 执行初始化
ansible-playbook init.yml 

version: '2.1'
services:
  caddy:
    image: ysicing/caddy
    container_name: caddy
    volumes:
    - ./ssl:/root/.caddy
    - /var/log/caddy:/var/log/caddy
    - ./Caddyfile:/etc/Caddyfile
    - /root/.ssh:/root/.ssh
    - ./php:/srv
    network_mode: host
    restart: always

godu.dev {
    gzip
    prometheus
    log / /var/log/caddy/blog.log "{remote} {when} {method} {uri} {proto} {status} {size} {>User-Agent} {latency}" {
        rotate_size 50
        rotate_age  90
        rotate_keep 20
        rotate_compress
    }
    errors {
        * /etc/404.html
    }
    tls root@ysicing.net
    header / {
        X-Via Ucloud.CN.Beijing
        Strict-Transport-Security "max-age=31536000;includeSubDomains;preload"
        -Server
    }
    root /srv/godu.dev

    fastcgi / 127.0.0.1:9000 php
    rewrite {
        if {path} not_match ^\/admin
        to {path} {path}/ /index.php?{query}
    }
    on startup php-fpm7
    status 403 {
        /changelog.txt
        /config.inc.php
        /config
        /install
        /install.php
        /tools
        /usr/<马赛克>.db
        /var
    }
}

• AutoTags
• CodePrettify
• EditorMD
• LoveKKComment
• ShortLinks
• Sitemap
• SmartSpam
• Sticky
• UserAgent

# docker-compose.yaml
version: '2.1'
services:
  caddy:
    image: spanda/caddy:hugo
    container_name: caddy
    volumes:
    - ./ssl:/root/.caddy
    - /var/log/caddy:/var/log/caddy
    - ./Caddyfile:/etc/Caddyfile
    - ./GeoLite2.mmdb:/etc/GeoLite2.mmdb
    - /root/.ssh:/root/.ssh
    network_mode: host
    restart: always

# Caddyfile
ysicing.me {
    gzip
    prometheus
    log / /var/log/caddy/blog.log "{remote} {when} {method} {uri} {proto} {status} {size} {>User-Agent} {latency}" {
       rotate_size 50
    rotate_age  90
    rotate_keep 20
    rotate_compress
    }
    geoip /etc/GeoLite2.mmdb

    tls i@ysicing.me
    header / {
        Strict-Transport-Security "max-age=31536000;includeSubDomains;preload"
        Access-Control-Allow-Origin  *
        Access-Control-Allow-Methods "GET, POST, OPTIONS"
        X-XSS-Protection "1; mode=block"
        X-Content-Type-Options "nosniff"
        X-Frame-Options "SAMEORIGIN"
        -Server
    }
    redir 302 {
        if {geoip_country_code} is "CN"
    / https://godu.dev
   }
    errors {
        * /tmp/404.html
    }
    root /tmp/blog/public
    git {
        repo git@<马赛克地址>.git
        path /tmp/blog
        branch master
        key      /root/.ssh/id_rsa
        then hugo --destination=/tmp/blog/public
        hook /webhook <马赛克地址>
        hook_type github
        clone_args --recursive
        pull_args --recurse-submodules
        interval 86400
    }
    hugo
}