.gitlab-ci.yml

@@ -22,16 +22,11 @@ build-deploy:
     refs:
       - master
   before_script:
-    - pacman -Sy --noconfirm openssh hugo
-    - eval $(ssh-agent -s)
-    - mkdir -p ~/.ssh
-    - printf '%s\n' "$SSH_PRIVATE_KEY" | ssh-add -
-    - echo $SSH_KNOWN_HOSTS > ~/.ssh/known_hosts
+    - pacman -Sy --noconfirm hugo
   script:
     - hugo
-    - ssh -o StrictHostKeyChecking=no -o "UserKnownHostsFile /dev/null" kalube@sucs.org rm -rf public_html/blogtest
-    - scp -o StrictHostKeyChecking=no -o "UserKnownHostsFile /dev/null" -r public kalube@sucs.org:public_html/blogtest
+    - curl https://blogs.sucs.org/update.php
   artifacts:
     paths:
       - public
-    expire_in: 1 week
\ No newline at end of file
+    expire_in: 1 week

config.toml

-baseURL = "https://sucs.org/~kalube/blogtest"
+baseURL = "https://blogs.sucs.org/"
 relativeURLs = false
-languageCode = "en-us"
-title = "The S.U.C.S Register"
+languageCode = "en-gb"
+title = "The SUCS Register"
 theme = "sucs"
 
 paginate     = 10
@@ -29,4 +29,4 @@ paginate     = 10
   [[menu.main]]
     name = "Tags"
     url = "/tags"
-    weight = 4
\ No newline at end of file
+    weight = 4

content/authors/thomas-lake/_index.md

+---
+name: "Thomas Lake"
+# Delete the following if unused
+twitter: "@DrTomLake"
+github: "tswsl1989"
+website: "https://sucs.org/~tswsl1989/"
+---
+
+Marine Energy researcher in the [ZCCE Energy and Environment Research Group](https://www.swansea.ac.uk/engineering/zcce/energy-environment/). One of the SUCS admin team, trying to be as useful as possible when time permits.

content/posts/20200924-Gitlab-CI-and-testing.md

+---
+title: "Attempting to deploy Hugo with GitLab CI/CD"
+date: 2020-09-24T20:21:00+01:00
+draft: false
+toc: false
+authors:
+  - Thomas Lake
+tags:
+  - sucs
+  - gitlab
+---
+
+How do you arrange to deploy a new project on to an old server, without opening up a raft of vulnerabilities?
+
+The answer to that is, unsurprisingly, "with difficulty"
+<!--more-->
+
+SUCS has a single main server, called silver, that provides pretty much all of our public facing services. There are a few things, such as gitlab, that live as virtual machines on a second server (called iridium).
+
+The current deployment method uses a PHP script hosted on the blogs site that, when called from an authorised IP, will download the latest blog build from GitLab and extract it on the server for the world to see.
+
+This appeared to be a more tightly constrained solution than allowing SSH access for the user that the site runs as, but still feels like a bit of a bodge. At least it fits in with the rest of the bodges, patches and decade old "temporary" solutions that make up most of the SUCS infrastructure!