diff --git a/assets/img/background.svg b/assets/img/background.svg new file mode 100644 index 0000000..6bda46d --- /dev/null +++ b/assets/img/background.svg @@ -0,0 +1,8 @@ + + + + 111110010010100111111001001010010111100101101111001011011000111110011101100011111001111001100111010011001110000110011000001100110001000011010000010000110100000001110110100101000111011010010101000011000101000011000100000101111000001011110110101011000011010101100011100110010101111001100101011001001100011100100110001110111100011011011110001101000000010100000000010100111011111011101111100001001111100010011111 + + + + \ No newline at end of file diff --git a/config/_default/params.toml b/config/_default/params.toml index d43518d..b0e8a01 100644 --- a/config/_default/params.toml +++ b/config/_default/params.toml @@ -6,12 +6,12 @@ # https://blowfish.page/docs/configuration/#theme-parameters colorScheme = "blowfish" -defaultAppearance = "dark" # valid options: light or dark -autoSwitchAppearance = false +defaultAppearance = "light" # valid options: light or dark +autoSwitchAppearance = true -enableA11y = false +enableA11y = true enableSearch = true -enableCodeCopy = false +enableCodeCopy = true enableStructuredBreadcrumbs = false # enableStyledScrollbar = true # disable to use native scrollbar style (defaults to true) @@ -20,18 +20,19 @@ replyByEmail = false # mainSections = ["section1", "section2"] # robots = "" -disableImageOptimization = false -disableImageOptimizationMD = false +disableImageZoom = true +disableImageOptimization = true +# disableImageOptimizationMD = false disableTextInHeader = true # backgroundImageWidth = 1200 -defaultBackgroundImage = "/img/background.png" # used as default for background images -defaultFeaturedImage = "/img/background.png" # used as default for featured images in all articles +defaultBackgroundImage = "/img/background.svg" # used as default for background images +# defaultFeaturedImage = "/img/background.png" # used as default for featured images in all articles # defaultSocialImage = "/android-chrome-512x512.png" # used as default for social media sharing (Open Graph and Twitter) hotlinkFeatureImage = false # imagePosition = "50% 50%" -# highlightCurrentMenuArea = true +highlightCurrentMenuArea = true # smartTOC = true # smartTOCHideUnfocusedChildren = true @@ -58,42 +59,42 @@ forgejoDefaultServer = "https://v11.next.forgejo.org" showMoreLink = true showMoreLinkDest = "/posts" cardView = false - cardViewScreenWidth = true + cardViewScreenWidth = false layoutBackgroundBlur = true # only used when layout equals background - disableHeroImageFilter = false # only used when layout equals hero + disableHeroImageFilter = true # only used when layout equals hero [article] showDate = true - showViews = false - showLikes = false - showDateOnlyInArticle = false - showDateUpdated = false + # showViews = false + # showLikes = false + # showDateOnlyInArticle = false + # showDateUpdated = false showAuthor = true # showAuthorBottom = false showHero = true heroStyle = "background" # valid options: basic, big, background, thumbAndBackground layoutBackgroundBlur = true # only used when heroStyle equals background or thumbAndBackground layoutBackgroundHeaderSpace = true # only used when heroStyle equals background - showBreadcrumbs = false + #showBreadcrumbs = false showDraftLabel = true - showEdit = false + #showEdit = false # editURL = "https://github.com/username/repo/" - editAppendPath = true + # editAppendPath = true seriesOpened = true showHeadingAnchors = true showPagination = true - invertPagination = false + # invertPagination = false showReadingTime = true showTableOfContents = true showRelatedContent = true - relatedContentLimit = 6 - showTaxonomies = true # use showTaxonomies OR showCategoryOnly, not both - showCategoryOnly = false # use showTaxonomies OR showCategoryOnly, not both + relatedContentLimit = 3 + # showTaxonomies = true # use showTaxonomies OR showCategoryOnly, not both + showCategoryOnly = true # use showTaxonomies OR showCategoryOnly, not both showAuthorsBadges = false - showWordCount = false + # showWordCount = false # sharingLinks = [ "linkedin", "twitter", "bluesky", "mastodon", "reddit", "pinterest", "facebook", "email", "whatsapp", "telegram", "line"] sharingLinks = [ "reddit", "email", "telegram"] - showZenMode = false + # showZenMode = false # externalLinkForceNewTab = false # disable to allow external links in the same tab (defaults to true) # showComments = true @@ -102,17 +103,17 @@ forgejoDefaultServer = "https://v11.next.forgejo.org" heroStyle = "background" # valid options: basic, big, background, thumbAndBackground layoutBackgroundBlur = true # only used when heroStyle equals background or thumbAndBackground layoutBackgroundHeaderSpace = true # only used when heroStyle equals background - showBreadcrumbs = false - showSummary = false - showViews = false - showLikes = false - showTableOfContents = false - showCards = false - orderByWeight = false - groupByYear = false - cardView = false - cardViewScreenWidth = false - constrainItemsWidth = false + # showBreadcrumbs = false + showSummary = true + # showViews = false + # showLikes = false + # showTableOfContents = false + showCards = true + # orderByWeight = false + # groupByYear = false + # cardView = false + # cardViewScreenWidth = false + # constrainItemsWidth = false [sitemap] excludedKinds = ["taxonomy", "term"] diff --git a/content/cheatsheets/git-workflow/featured.png b/content/cheatsheets/git-workflow/featured.png deleted file mode 100644 index 9aa6d9a..0000000 Binary files a/content/cheatsheets/git-workflow/featured.png and /dev/null differ diff --git a/content/posts/blog-part-1-architecture/featured.png b/content/posts/blog-part-1-architecture/featured.png deleted file mode 100644 index e07ea2d..0000000 Binary files a/content/posts/blog-part-1-architecture/featured.png and /dev/null differ diff --git a/content/posts/blog-part-2-k8s-deployment/feature_2.png b/content/posts/blog-part-2-k8s-deployment/feature_2.png deleted file mode 100644 index 98268d0..0000000 Binary files a/content/posts/blog-part-2-k8s-deployment/feature_2.png and /dev/null differ diff --git a/content/posts/blog-part-3-dev-environment/feature_3.png b/content/posts/blog-part-3-dev-environment/feature_3.png deleted file mode 100644 index 37fe797..0000000 Binary files a/content/posts/blog-part-3-dev-environment/feature_3.png and /dev/null differ diff --git a/content/posts/blog-part-4-git-workflow/feature_4.png b/content/posts/blog-part-4-git-workflow/feature_4.png deleted file mode 100644 index 810aa24..0000000 Binary files a/content/posts/blog-part-4-git-workflow/feature_4.png and /dev/null differ diff --git a/content/posts/blog-part-4-git-workflow/index.md b/content/posts/blog-part-4-git-workflow/index.md index 0afbeb3..e1dea41 100644 --- a/content/posts/blog-part-4-git-workflow/index.md +++ b/content/posts/blog-part-4-git-workflow/index.md @@ -3,6 +3,7 @@ title: "Блог на Hugo в K3s: часть 4 - выбор Git workflow" date: 2026-02-16 draft: false description: "Одна папка или две для dev и production? Разбираем Git workflow для Hugo блога в K3s — переключение веток против отдельных директорий." +summary: "Одна папка или две для dev и production? Разбираем Git workflow для Hugo блога в K3s — переключение веток против отдельных директорий." tags: ["git", "workflow", "devops", "hugo"] categories: ["Мои проекты"] series: ["Блог на Hugo в K3s"] diff --git a/content/posts/blog-part-5-debugging/feature_5.png b/content/posts/blog-part-5-debugging/feature_5.png deleted file mode 100644 index 94daf71..0000000 Binary files a/content/posts/blog-part-5-debugging/feature_5.png and /dev/null differ diff --git a/content/posts/blog-part-6-namespace-migration/feature_6.png b/content/posts/blog-part-6-namespace-migration/feature_6.png deleted file mode 100644 index 04c8480..0000000 Binary files a/content/posts/blog-part-6-namespace-migration/feature_6.png and /dev/null differ diff --git a/content/posts/debian-12-base-hardening/featured.png b/content/posts/debian-12-base-hardening/featured.png deleted file mode 100644 index 9d1c913..0000000 Binary files a/content/posts/debian-12-base-hardening/featured.png and /dev/null differ diff --git a/content/posts/debian-12-base-hardening/index.md b/content/posts/debian-12-base-hardening/index.md index 69b830b..2fa27aa 100644 --- a/content/posts/debian-12-base-hardening/index.md +++ b/content/posts/debian-12-base-hardening/index.md @@ -3,6 +3,7 @@ title: "Debian 12: базовая настройка и hardening для product date: 2026-05-22 draft: false description: "Пошаговая настройка чистого Debian 12 (Bookworm) для production: SSH, firewall, fail2ban, swap, sysctl, автообновления, логи, бэкап конфигов." +summary: "Пошаговая настройка чистого Debian 12 (Bookworm) для production: SSH, firewall, fail2ban, swap, sysctl, автообновления, логи, бэкап конфигов." tags: ["debian-12", "security", "hardening", "ssh", "ufw", "fail2ban", "sysctl", "production", "linux"] categories: ["Безопасность"] series: ["Linux Hardening"] diff --git a/content/posts/debian-12-docker-hardening/featured.png b/content/posts/debian-12-docker-hardening/featured.png deleted file mode 100644 index 9d1c913..0000000 Binary files a/content/posts/debian-12-docker-hardening/featured.png and /dev/null differ diff --git a/content/posts/debian-12-docker-hardening/index.md b/content/posts/debian-12-docker-hardening/index.md index 984d245..caafb41 100644 --- a/content/posts/debian-12-docker-hardening/index.md +++ b/content/posts/debian-12-docker-hardening/index.md @@ -3,6 +3,7 @@ title: "Debian 12: настройка Docker-хоста для production" date: 2026-05-22 draft: false description: "Пошаговая настройка Debian 12 как Docker-хоста для production: установка Docker, настройка daemon, UFW + Docker интеграция, изоляция контейнеров, docker.sock, ресурсные ограничения." +summary: "Пошаговая настройка Debian 12 как Docker-хоста для production: установка Docker, настройка daemon, UFW + Docker интеграция, изоляция контейнеров, docker.sock, ресурсные ограничения." tags: ["debian-12", "docker", "security", "hardening", "ufw", "production", "containers", "linux"] categories: ["Безопасность"] series: ["Linux Hardening"] diff --git a/content/posts/disk-full-incident-debian/index.md b/content/posts/disk-full-incident-debian/index.md index d02a8b7..31b5a2d 100644 --- a/content/posts/disk-full-incident-debian/index.md +++ b/content/posts/disk-full-incident-debian/index.md @@ -3,6 +3,7 @@ title: "Диск забит на 100%: как Loki съел 24 ГБ логов, date: 2026-06-24 draft: false description: "Расследование заполненного диска на Debian 12: от алерта Zabbix через df, du и docker system df до найденного виновника - логов Loki без лимита ротации. Чек-лист подозреваемых и настройка лимита логов Docker." +summary: "Расследование заполненного диска на Debian 12: от алерта Zabbix через df, du и docker system df до найденного виновника - логов Loki без лимита ротации." tags: ["debian-12", "docker", "zabbix", "мониторинг", "диагностика", "логи", "xfs", "linux"] categories: ["Файловые системы и хранилище"] series: ["Linux: эксплуатация и обслуживание"] diff --git a/content/posts/k3s-part1-architecture/featured.png b/content/posts/k3s-part1-architecture/featured.png deleted file mode 100644 index 9afcdfb..0000000 Binary files a/content/posts/k3s-part1-architecture/featured.png and /dev/null differ diff --git a/content/posts/k3s-part2-infrastructure/featured.png b/content/posts/k3s-part2-infrastructure/featured.png deleted file mode 100644 index c147fb5..0000000 Binary files a/content/posts/k3s-part2-infrastructure/featured.png and /dev/null differ diff --git a/content/posts/k3s-part3-installation/featured.png b/content/posts/k3s-part3-installation/featured.png deleted file mode 100644 index 0ef9b9c..0000000 Binary files a/content/posts/k3s-part3-installation/featured.png and /dev/null differ diff --git a/content/posts/mailserver-part-1-intro/featured.png b/content/posts/mailserver-part-1-intro/featured.png deleted file mode 100644 index caa9836..0000000 Binary files a/content/posts/mailserver-part-1-intro/featured.png and /dev/null differ diff --git a/content/posts/mailserver-part-1-intro/index.md b/content/posts/mailserver-part-1-intro/index.md index 56008a5..d6754e0 100644 --- a/content/posts/mailserver-part-1-intro/index.md +++ b/content/posts/mailserver-part-1-intro/index.md @@ -3,6 +3,7 @@ title: "Свой почтовый сервер на Debian 12 вместо Gmail date: 2026-03-05 draft: false description: "Зачем поднимать свой mail-сервер вместо Gmail. Анатомия почтового сервера: Postfix, Dovecot, антиспам, антивирус. Системные требования и чек-лист готовности." +summaty: "Зачем поднимать свой mail-сервер вместо Gmail. Анатомия почтового сервера: Postfix, Dovecot, антиспам, антивирус. Системные требования и чек-лист готовности." tags: ["postfix", "dovecot", "smtp", "imap", "self-hosting"] categories: ["Почтовые системы"] series: ["Почтовый сервер на Debian 12"] diff --git a/content/posts/mailserver-part-2-postfix-dovecot/featured.png b/content/posts/mailserver-part-2-postfix-dovecot/featured.png deleted file mode 100644 index 228ada8..0000000 Binary files a/content/posts/mailserver-part-2-postfix-dovecot/featured.png and /dev/null differ diff --git a/content/posts/mailserver-part-2-postfix-dovecot/index.md b/content/posts/mailserver-part-2-postfix-dovecot/index.md index 2bb42a5..6e0aba0 100644 --- a/content/posts/mailserver-part-2-postfix-dovecot/index.md +++ b/content/posts/mailserver-part-2-postfix-dovecot/index.md @@ -3,6 +3,7 @@ title: "Почтовый сервер на Debian 12: полное руково date: 2026-03-10 draft: false description: "Установка и настройка Postfix и Dovecot. SMTP/IMAP, виртуальные ящики, авторизация через SASL. Первые тесты отправки и получения почты." +summary: "Установка и настройка Postfix и Dovecot. SMTP/IMAP, виртуальные ящики, авторизация через SASL. Первые тесты отправки и получения почты." tags: ["postfix", "dovecot", "smtp", "imap", "lmtp", "sasl", "self-hosting"] categories: ["Почтовые системы"] series: ["Почтовый сервер на Debian 12"] diff --git a/content/posts/mailserver-part-3-security/featured.png b/content/posts/mailserver-part-3-security/featured.png deleted file mode 100644 index 1a85d87..0000000 Binary files a/content/posts/mailserver-part-3-security/featured.png and /dev/null differ diff --git a/content/posts/mailserver-part-3-security/index.md b/content/posts/mailserver-part-3-security/index.md index ef9c192..4392199 100644 --- a/content/posts/mailserver-part-3-security/index.md +++ b/content/posts/mailserver-part-3-security/index.md @@ -3,6 +3,7 @@ title: "Почтовый сервер на Debian 12: полное руково date: 2026-03-16 draft: false description: "Настройка Amavis, ClamAV, SpamAssassin и Postgrey для защиты от вирусов и спама. Fail2ban для защиты от брутфорса SMTP/IMAP. Обучение антиспама, белые списки, мониторинг." +summary: "Настройка Amavis, ClamAV, SpamAssassin и Postgrey для защиты от вирусов и спама. Fail2ban для защиты от брутфорса SMTP/IMAP. Обучение антиспама, белые списки, мониторинг." tags: ["amavis", "clamav", "spamassassin", "postgrey", "fail2ban"] categories: ["Почтовые системы"] series: ["Почтовый сервер на Debian 12"] diff --git a/content/posts/mailserver-part-4-tls+dkim+spf+dmarс/featured.png b/content/posts/mailserver-part-4-tls+dkim+spf+dmarс/featured.png deleted file mode 100644 index 5e71a41..0000000 Binary files a/content/posts/mailserver-part-4-tls+dkim+spf+dmarс/featured.png and /dev/null differ diff --git a/content/posts/mailserver-part-4-tls+dkim+spf+dmarс/index.md b/content/posts/mailserver-part-4-tls+dkim+spf+dmarс/index.md index bc7ced9..b974e7b 100644 --- a/content/posts/mailserver-part-4-tls+dkim+spf+dmarс/index.md +++ b/content/posts/mailserver-part-4-tls+dkim+spf+dmarс/index.md @@ -4,6 +4,7 @@ slug: mailserver-part-4-tls-dkim-spf-dmarc date: 2026-04-19 draft: false description: "Настройка TLS через Let's Encrypt, DKIM подписей, SPF и DMARC записей. Шифрование всех соединений SMTP/IMAP, повышение репутации отправителя для защиты от попадания в спам." +summary: "Настройка TLS через Let's Encrypt, DKIM подписей, SPF и DMARC записей. Шифрование всех соединений SMTP/IMAP, повышение репутации отправителя для защиты от попадания в спам." tags: ["tls", "ssl", "lets-encrypt", "certbot", "dkim", "opendkim", "spf", "dmarc", "swaks"] categories: ["Почтовые системы"] series: ["Почтовый сервер на Debian 12"] diff --git a/content/posts/ubuntu-24-base-hardening/index.md b/content/posts/ubuntu-24-base-hardening/index.md index b87454b..c08cb50 100644 --- a/content/posts/ubuntu-24-base-hardening/index.md +++ b/content/posts/ubuntu-24-base-hardening/index.md @@ -3,14 +3,13 @@ title: "Ubuntu 24.04: базовая настройка и hardening для prod date: 2026-07-07 draft: false description: "Пошаговая настройка Ubuntu 24.04 LTS (Noble Numbat) для production: SSH, firewall, fail2ban, swap, sysctl, автообновления, логи, бэкап конфигов." +summary: "Пошаговая настройка Ubuntu 24.04 LTS (Noble Numbat) для production: SSH, firewall, fail2ban, swap, sysctl, автообновления, логи, бэкап конфигов." tags: ["ubuntu-24.04", "security", "hardening", "ssh", "ufw", "fail2ban", "sysctl", "production", "linux"] categories: ["Безопасность"] series: ["Linux Hardening"] series_order: 3 --- -# Ubuntu 24.04: базовая настройка и hardening для production - Ubuntu 24.04 LTS - production-ready дистрибутив с поддержкой до 2029 года (стандартная) и до 2034 года (расширенная через Ubuntu Pro). Из коробки он безопаснее голого Debian - UFW предустановлен, `unattended-upgrades` работает сразу - но настройки по умолчанию далеки от production-ready. Статья покрывает всё что нужно для сервера без контейнеров. Docker - отдельная тема. diff --git a/i18n/ru.yaml b/i18n/ru.yaml index 2470e1a..3fb0a45 100644 --- a/i18n/ru.yaml +++ b/i18n/ru.yaml @@ -38,8 +38,8 @@ author: byline_title: "Автор" code: - copy: "Копировать" - copied: "Скопировано" + copy: "Копи." + copied: "ОК" error: 404_title: "Страница не найдена: в замешательстве:"