Added swears lxc

This reverts commit fdc40bdd31.

.gitea/workflows/Hugo-deploy.yaml

@@ -0,0 +1,77 @@
+name: hugo deploy
+
+on:
+  push:
+    branches: [ main ]
+    paths:
+      - "website/**"
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+
+      - name: Install Hugo
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y wget tar openssh-client git rsync
+          HUGO_VERSION=0.154.1
+          ARCH=Linux-64bit
+          wget -q https://github.com/gohugoio/hugo/releases/download/v${HUGO_VERSION}/hugo_extended_${HUGO_VERSION}_${ARCH}.tar.gz -O /tmp/hugo.tar.gz
+          tar -xzf /tmp/hugo.tar.gz -C /tmp
+          sudo mv /tmp/hugo /usr/local/bin/hugo
+          hugo version
+
+      - name: Ensure submodules
+        run: |
+          git submodule sync --recursive
+          git submodule update --init --recursive
+
+      - name: Build site
+        run: |
+          hugo -s website -d public
+
+      - name: Show build output
+        run: |
+          echo "CWD: $(pwd)"
+          hugo version
+          hugo -s website env
+          echo "Listing repo root:" && ls -la
+          echo "Listing website:" && ls -la website || true
+          echo "Listing public:" && ls -la public || true
+          echo "Listing website/public:" && ls -la website/public || true
+
+      - name: Configure SSH
+        env:
+          HUGO_DEPLOY_SSH_PRIVATE_KEY: ${{ secrets.HUGO_DEPLOY_SSH_PRIVATE_KEY }}
+        run: |
+          mkdir -p ~/.ssh
+          echo "$HUGO_DEPLOY_SSH_PRIVATE_KEY" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          chmod 700 ~/.ssh
+
+      - name: Deploy to server
+        run: |
+          set -e
+          # detect source directory with built site
+          if [ -d public ] && [ "$(ls -A public 2>/dev/null)" ]; then
+            SRC=public
+          elif [ -d website/public ] && [ "$(ls -A website/public 2>/dev/null)" ]; then
+            SRC=website/public
+          else
+            echo "ERROR: no build output found in public/ or website/public/"
+            ls -la
+            exit 1
+          fi
+
+          echo "Deploying from $SRC"
+
+          ssh -i ~/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null hugo-deploy@10.20.20.102 "mkdir -p /opt/containers/website/content && rm -rf /opt/containers/website/content/*"
+
+          rsync -avz --delete -e "ssh -i ~/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null" "$SRC"/ hugo-deploy@10.20.20.102:/opt/containers/website/content/

.gitignore

@@ -1,2 +1,8 @@
 .DS_Store
 .obsidian/workspace.json
+
+website/public/
+website/resources/_gen/
+website/.hugo_build.lock
+
+.env

.gitmodules

@@ -0,0 +1,4 @@
+[submodule "website/themes/blowfish"]
+	path = website/themes/blowfish
+	url = https://github.com/nunocoracao/blowfish.git
+	branch = main

README.md

@@ -4,6 +4,7 @@ If you are viewing on GitHub, you can view this repo on my self-hosted instance
 
 ## 📋 Table of Contents
 - [Overview](#-overview)
+- [Status / Uptime](#-status--uptime)
 - [Skills Demonstrated](#-skills-demonstrated)
 - [Hardware](#-hardware)
 - [Services, Applications & Deployments](#-services-applications--deployments)
@@ -16,6 +17,42 @@ If you are viewing on GitHub, you can view this repo on my self-hosted instance
 - **Contents**: this git repo contains most, if not all, of my homelab infrastructure
 - **Scale**: I still consider this lab to be a relatively small one
 
+## ✅ Status / Uptime
+Status page: https://status.dontddos.me
+
+| Service       | Status                                                                                           | Uptime (365d)                                                                                                                       |
+| ------------- | ------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------- |
+| dontddos.me   | [![](https://status.dontddos.me/api/badge/30/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/30/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| PVE-01        | [![](https://status.dontddos.me/api/badge/1/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/1/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| Portainer     | [![](https://status.dontddos.me/api/badge/8/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/8/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| K3s-CP-01     | [![](https://status.dontddos.me/api/badge/2/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/2/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| K3s-CP-02     | [![](https://status.dontddos.me/api/badge/3/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/3/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| K3s-CP-03     | [![](https://status.dontddos.me/api/badge/4/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/4/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| K3s-Worker-01 | [![](https://status.dontddos.me/api/badge/5/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/5/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| K3s-Worker-02 | [![](https://status.dontddos.me/api/badge/6/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/6/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| K3s-Worker-03 | [![](https://status.dontddos.me/api/badge/7/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/7/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| pfSense       | [![](https://status.dontddos.me/api/badge/9/status)](https://status.dontddos.me/status/homelab)  | [![](https://status.dontddos.me/api/badge/9/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab)  |
+| Adguard Home  | [![](https://status.dontddos.me/api/badge/10/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/10/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Pangolin      | [![](https://status.dontddos.me/api/badge/11/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/11/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Grafana       | [![](https://status.dontddos.me/api/badge/12/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/12/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Vaultwarden   | [![](https://status.dontddos.me/api/badge/13/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/13/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Authentik     | [![](https://status.dontddos.me/api/badge/14/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/14/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Wazuh         | [![](https://status.dontddos.me/api/badge/15/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/15/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Gitea         | [![](https://status.dontddos.me/api/badge/16/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/16/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Argo CD       | [![](https://status.dontddos.me/api/badge/17/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/17/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Longhorn      | [![](https://status.dontddos.me/api/badge/18/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/18/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| TrueNAS       | [![](https://status.dontddos.me/api/badge/19/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/19/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Jellyfin      | [![](https://status.dontddos.me/api/badge/20/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/20/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Jellyseerr    | [![](https://status.dontddos.me/api/badge/21/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/21/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Radarr        | [![](https://status.dontddos.me/api/badge/22/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/22/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Sonarr        | [![](https://status.dontddos.me/api/badge/23/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/23/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Prowlarr      | [![](https://status.dontddos.me/api/badge/24/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/24/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| qBittorrent   | [![](https://status.dontddos.me/api/badge/25/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/25/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Mailcow       | [![](https://status.dontddos.me/api/badge/26/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/26/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Synapse       | [![](https://status.dontddos.me/api/badge/27/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/27/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Pelican       | [![](https://status.dontddos.me/api/badge/28/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/28/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+| Wings-01      | [![](https://status.dontddos.me/api/badge/29/status)](https://status.dontddos.me/status/homelab) | [![](https://status.dontddos.me/api/badge/29/uptime?duration=365&label=Uptime%20(365d))](https://status.dontddos.me/status/homelab) |
+
 ## 📚 Skills Demonstrated
 
 **Networking:**
@@ -75,15 +112,16 @@ If you are viewing on GitHub, you can view this repo on my self-hosted instance
 ### Networking
 - **pfSense** - Edge firewall, DHCP
 - [**AdGuard Home**](docker/docker-01/adguard-home/) - DNS
-- **Pangolin** - Proxy for external HTTP traffic
+- **Pangolin** - Reverse proxy for external HTTP traffic (internet-facing)
 - [**Traefik**](kubernetes/traefik/traefik) - Proxy for internal HTTP traffic to Kubernetes
 - [**Nginx**](docker/multi-host/proxy/) - Proxy for internal HTTP traffic
 - **Tailscale** - Remote access via VPN
 ### Monitoring
+- [**Uptime Kuma**](kubernetes/monitoring/uptime-kuma/) - Uptime monitoring
 - [**Grafana**](kubernetes/monitoring/grafana/)
 - [**Prometheus**](kubernetes/monitoring/prometheus/)
 ### Security
-- [**Vaultwarden**](docker/dcker-01/vaultwarden/) - Password manager
+- [**Vaultwarden**](docker/docker-01/vaultwarden/) - Password manager
 - [**Authentik**](docker/docker-02/authentik/) - SSO and OIDC
 - **CrowdSec** - IPS monitoring for all incoming traffic
 - **Wazuh** - Security monitoring and SIEM
@@ -100,7 +138,7 @@ If you are viewing on GitHub, you can view this repo on my self-hosted instance
 
 ### Media Stack
 - [**Jellyfin**](docker/docker-02/jellyfin/) - Streaming
-- [**Jellyseer**](docker/docker-02/jellyseerr) - Requests
+- [**Jellyseerr**](docker/docker-02/jellyseerr) - Requests
 - **Radarr** - Movie index manager
 - **Sonarr** - Show index manager
 - **Prowlarr** - Torrent manager
@@ -111,9 +149,12 @@ If you are viewing on GitHub, you can view this repo on my self-hosted instance
 - **Synapse** - Self-hosted, decentralised communication
 
 ### Games
-- **Pelican** - Game panel
+- [**Pelican**](docker/docker-02/pelican/) - Game panel
 - **Wings** - Game servers
 
+## Remote management
+- [**Rustdesk**](docker/docker-01/rustdesk/)
+
 ## 🌐 Network Architecture 
 **Network Topology:** 
 ``` 
@@ -160,6 +201,7 @@ Arista DCS-7010T - Core L3 Switch
 
 
 ## 🔗 Links 
+- **Status Page:** https://status.dontddos.me
 - **Personal Website:** https://dontddos.me 
 - **GitHub:** https://github.com/ddosian 
 - **Self-hosted Gitea:** https://gitea.dontddos.me

docker/docker-01/rustdesk/compose.yaml

@@ -0,0 +1,32 @@
+services:
+  hbbs:
+    container_name: hbbs
+    image: rustdesk/rustdesk-server:latest
+    command: hbbs
+    volumes:
+      - /opt/containers/rustdesk/data:/root
+    networks:
+      - rustdesk
+    ports:
+      - "21115:21115"
+      - "21116:21116"
+      - "21116:21116/udp"
+    depends_on:
+      - hbbr
+    restart: unless-stopped
+
+  hbbr:
+    container_name: hbbr
+    image: rustdesk/rustdesk-server:latest
+    command: hbbr
+    volumes:
+      - /opt/containers/rustdesk/data:/root
+    networks:
+      - rustdesk
+    ports:
+      - "21117:21117"
+    restart: unless-stopped
+
+
+networks:
+  rustdesk:

docker/docker-02/website/compose.yaml

@@ -0,0 +1,14 @@
+---
+services:
+  nginx:
+    image: nginx:latest
+    container_name: website
+    volumes:
+      - /opt/containers/website/content:/usr/share/nginx/html:ro
+    networks:
+      - newt
+    restart: unless-stopped
+
+networks:
+  newt:
+    external: true

docs/infrastructure/proxmox-ve.md

@@ -15,3 +15,4 @@
 | ID  | Name         | IP   | VLAN | Cores | RAM (GB) | Storage (GB) | Host   | OS                  |
 | --- | ------------ | ---- | ---- | ----- | -------- | ------------ | ------ | ------------------- |
 | 103 | tailscale-01 | DHCP | 1    | 1     | 0.5      | 8            | pve-01 | Ubuntu Server 25.04 |
+| 107 | swears       | DHCP | 1    | 1     | 0.5      | 8            | pve-02 | Ubuntu Server 25.04 |

kubernetes/longhorn-system/longhorn/ingressroute.yaml

@@ -0,0 +1,17 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: longhorn
+  namespace: longhorn-system
+spec:
+  entryPoints:
+    - web
+    - websecure
+  routes:
+    - match: Host(`longhorn.local.dontddos.me`)
+      kind: Rule
+      middlewares:
+        - name: longhorn-basic-auth-basic-auth
+      services:
+        - name: longhorn-frontend
+          port: 80

kubernetes/monitoring/uptime-kuma/deployment.yaml

@@ -0,0 +1,26 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: uptime-kuma
+  namespace: monitoring
+spec:
+  selector:
+    matchLabels:
+      app: uptime-kuma
+  template:
+    metadata:
+      labels:
+        app: uptime-kuma
+    spec:
+      containers:
+      - name: uptime-kuma
+        image: louislam/uptime-kuma:2
+        ports:
+        - containerPort: 3001
+        volumeMounts:
+        - name: uptime-kuma-data
+          mountPath: /app/data
+      volumes:
+      - name: uptime-kuma-data
+        persistentVolumeClaim:
+          claimName: uptime-kuma-data

kubernetes/monitoring/uptime-kuma/ingressroute.yaml

@@ -0,0 +1,15 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: uptime-kuma
+  namespace: monitoring
+spec:
+  entryPoints:
+    - web
+    - websecure
+  routes:
+    - match: Host(`uptime-kuma.local.dontddos.me`)
+      kind: Rule
+      services:
+        - name: uptime-kuma
+          port: 3001

kubernetes/monitoring/uptime-kuma/pvc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: uptime-kuma-data
+  namespace: monitoring
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 3Gi

kubernetes/monitoring/uptime-kuma/service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: uptime-kuma
+  namespace: monitoring
+spec:
+  selector:
+    app: uptime-kuma
+  ports:
+  - port: 3001
+    targetPort: 3001

kubernetes/newt/newt/deployment.yaml

@@ -0,0 +1,30 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: newt
+  namespace: newt
+spec:
+  selector:
+    matchLabels:
+      app: newt
+  template:
+    metadata:
+      labels:
+        app: newt
+    spec:
+      containers:
+      - name: newt
+        image: fosrl/newt
+        env:
+          - name: PANGOLIN_ENDPOINT
+            value: "https://pangolin.dontddos.me"
+          - name: NEWT_ID
+            valueFrom:
+              secretKeyRef:
+                key: newt-id
+                name: newt-secret
+          - name: NEWT_SECRET
+            valueFrom:
+              secretKeyRef:
+                key: newt-secret
+                name: newt-secret

website/archetypes/default.md

@@ -0,0 +1,5 @@
++++
+date = '{{ .Date }}'
+draft = true
+title = '{{ replace .File.ContentBaseName "-" " " | title }}'
++++

website/config/_default/hugo.toml

@@ -0,0 +1,69 @@
+# -- Site Configuration --
+# Refer to the theme docs for more details about each of these parameters.
+# https://blowfish.page/docs/getting-started/
+
+theme = "blowfish"
+baseURL = "https://dontddos.me/"
+defaultContentLanguage = "en"
+
+# pluralizeListTitles = "true" # hugo function useful for non-english languages, find out more in  https://gohugo.io/getting-started/configuration/#pluralizelisttitles
+
+enableRobotsTXT = true
+summaryLength = 0
+
+buildDrafts = false
+buildFuture = false
+
+enableEmoji = true
+
+# googleAnalytics = "G-XXXXXXXXX"
+
+[pagination]
+  pagerSize = 100
+
+[imaging]
+  anchor = 'Center'
+
+[taxonomies]
+  tag = "tags"
+  category = "categories"
+  author = "authors"
+  series = "series"
+
+[sitemap]
+  changefreq = 'daily'
+  filename = 'sitemap.xml'
+  priority = 0.5
+
+[outputs]
+  home = ["HTML", "RSS", "JSON"]
+
+[related]
+  threshold = 0
+  toLower = false
+
+    [[related.indices]]
+        name = "tags"
+        weight = 100
+
+    [[related.indices]]
+        name = "categories"
+        weight = 100
+
+    [[related.indices]]
+        name = "series"
+        weight = 50
+
+    [[related.indices]]
+        name = "authors"
+        weight = 20
+
+    [[related.indices]]
+        name = "date"
+        weight = 10
+
+    [[related.indices]]
+      applyFilter = false
+      name = 'fragmentrefs'
+      type = 'fragments'
+      weight = 10

website/config/_default/languages.en.toml

@@ -0,0 +1,27 @@
+disabled = false
+languageCode = "en"
+languageName = "English"
+weight = 1
+title = "DontDDoS"
+
+[params]
+  displayName = "EN"
+  isoCode = "en"
+  rtl = false
+  dateFormat = "2 January 2006"
+  # logo = "img/logo.png"
+  # secondaryLogo = "img/secondary-logo.png"
+  # description = "My awesome website"
+  # copyright = "Copy, _right?_ :thinking_face:"
+
+[params.author]
+  name = "DontDDoS"
+  email = "youremail@example.com"
+  image = "https://gitea.dontddos.me/avatars/acdecc4b14f643e6a16114c5223c5c3d2415e6b5ca7063cf54ecdcf0fe36c075?size=512"
+  imageQuality = 96
+  #headline = "I'm only human"
+  #bio = "A little bit about you"
+  links = [
+    { github = "https://github.com/ddosian" },
+    { gitea = "https://gitea.dontddos.me/dontddos"},
+  ]  

website/config/_default/markup.toml

@@ -0,0 +1,26 @@
+# -- Markup --
+# These settings are required for the theme to function.
+
+[goldmark]
+  [goldmark.parser]
+    wrapStandAloneImageWithinParagraph = false
+
+    [goldmark.parser.attribute]
+      block = true
+
+  [goldmark.renderer]
+    unsafe = true
+
+  [goldmark.extensions]
+    [goldmark.extensions.passthrough]
+      enable = true
+      [goldmark.extensions.passthrough.delimiters]
+        block = [['\[', '\]'], ['$$', '$$']]
+        inline = [['\(', '\)']]
+
+[highlight]
+  noClasses = false
+
+[tableOfContents]
+  startLevel = 2
+  endLevel = 4

website/config/_default/menus.en.toml

@@ -0,0 +1,69 @@
+# -- Main Menu --
+# The main menu is displayed in the header at the top of the page.
+# Acceptable parameters are name, pageRef, page, url, title, weight.
+# 
+# The simplest menu configuration is to provide:
+#   name = The name to be displayed for this menu link
+#   pageRef = The identifier of the page or section to link to
+#
+# By default the menu is ordered alphabetically. This can be
+# overridden by providing a weight value. The menu will then be
+# ordered by weight from lowest to highest.
+
+#[[main]]
+#  name = "Blog"
+#  pageRef = "posts"
+#  weight = 10
+
+#[[main]]
+#  name = "Parent"
+#  weight = 20
+
+#[[main]]
+#  name = "example sub-menu 1"
+#  parent = "Parent"
+#  pageRef = "posts"
+#  weight = 20
+
+#[[main]]
+#  name = "example sub-menu 2"
+#  parent = "Parent"
+#  pageRef = "posts"
+#  weight = 20
+
+#[[subnavigation]]
+#  name = "An interesting topic"
+#  pageRef = "tags/interesting-topic"
+#  weight = 10
+
+#[[subnavigation]]
+#  name = "My Awesome Category"
+#  pre = "github"
+#  pageRef = "categories/awesome"
+#  weight = 20
+
+#[[main]]
+#  name = "Categories"
+#  pageRef = "categories"
+#  weight = 20
+
+#[[main]]
+#  name = "Tags"
+#  pageRef = "tags"
+#  weight = 30
+
+
+# -- Footer Menu --
+# The footer menu is displayed at the bottom of the page, just before
+# the copyright notice. Configure as per the main menu above.
+
+
+# [[footer]]
+#   name = "Tags"
+#   pageRef = "tags"
+#   weight = 10
+
+# [[footer]]
+#   name = "Categories"
+#   pageRef = "categories"
+#   weight = 20

website/config/_default/params.toml

@@ -0,0 +1,181 @@
+# -- Theme Options --
+# These options control how the theme functions and allow you to
+# customise the display of your website.
+#
+# Refer to the theme docs for more details about each of these parameters.
+# https://blowfish.page/docs/configuration/#theme-parameters
+
+colorScheme = "github"
+defaultAppearance = "light" # valid options: light or dark
+autoSwitchAppearance = true
+
+enableA11y = false
+enableSearch = true
+enableCodeCopy = false
+enableStructuredBreadcrumbs = false
+# enableStyledScrollbar = true # disable to use native scrollbar style (defaults to true)
+
+replyByEmail = false
+
+# mainSections = ["section1", "section2"]
+# robots = ""
+
+disableImageOptimization = false
+disableImageOptimizationMD = false
+disableTextInHeader = false
+# backgroundImageWidth = 1200
+
+# defaultBackgroundImage = "IMAGE.jpg" # used as default for background images
+# defaultFeaturedImage = "IMAGE.jpg" # used as default for featured images in all articles
+# defaultSocialImage = "/android-chrome-512x512.png" # used as default for social media sharing (Open Graph and Twitter)
+hotlinkFeatureImage = false
+# imagePosition = "50% 50%"
+
+# highlightCurrentMenuArea = true
+# smartTOC = true
+# smartTOCHideUnfocusedChildren = true
+
+fingerprintAlgorithm = "sha512" # Valid values are "sha512" (default), "sha384", "sha256"
+
+giteaDefaultServer = "https://git.fsfe.org"
+forgejoDefaultServer = "https://v11.next.forgejo.org"
+
+[header]
+  layout = "basic" # valid options: basic, fixed, fixed-fill, fixed-gradient, fixed-fill-blur
+
+[footer]
+  showMenu = true
+  showCopyright = true
+  showThemeAttribution = true
+  showAppearanceSwitcher = true
+  showScrollToTop = true
+
+[homepage]
+  layout = "profile" # valid options: page, profile, hero, card, background, custom
+  #homepageImage = "IMAGE.jpg" # used in: hero, and card
+  showRecent = false
+  showRecentItems = 5
+  showMoreLink = false
+  showMoreLinkDest = "/posts/"
+  cardView = false
+  cardViewScreenWidth = false
+  layoutBackgroundBlur = false # only used when layout equals background
+  disableHeroImageFilter = false # only used when layout equals hero
+
+[article]
+  showDate = true
+  showViews = false
+  showLikes = false
+  showDateOnlyInArticle = false
+  showDateUpdated = false
+  showAuthor = true
+  # showAuthorBottom = false
+  showHero = false
+  # heroStyle = "basic" # valid options: basic, big, background, thumbAndBackground
+  layoutBackgroundBlur = true # only used when heroStyle equals background or thumbAndBackground
+  layoutBackgroundHeaderSpace = true # only used when heroStyle equals background
+  showBreadcrumbs = false
+  showDraftLabel = true
+  showEdit = false
+  # editURL = "https://github.com/username/repo/"
+  editAppendPath = true
+  seriesOpened = false
+  showHeadingAnchors = true
+  showPagination = true
+  invertPagination = false
+  showReadingTime = true
+  showTableOfContents = false
+  # showRelatedContent = false
+  # relatedContentLimit = 3
+  showTaxonomies = false # use showTaxonomies OR showCategoryOnly, not both
+  showCategoryOnly = false # use showTaxonomies OR showCategoryOnly, not both
+  showAuthorsBadges = false
+  showWordCount = true
+  # sharingLinks = [ "linkedin", "twitter", "bluesky", "mastodon", "reddit", "pinterest", "facebook", "email", "whatsapp", "telegram", "line"]
+  showZenMode = false
+
+[list]
+  showHero = false
+  # heroStyle = "background" # valid options: basic, big, background, thumbAndBackground
+  layoutBackgroundBlur = true # only used when heroStyle equals background or thumbAndBackground
+  layoutBackgroundHeaderSpace = true # only used when heroStyle equals background
+  showBreadcrumbs = false
+  showSummary = false
+  showViews = false
+  showLikes = false
+  showTableOfContents = false
+  showCards = false
+  orderByWeight = false
+  groupByYear = true
+  cardView = false
+  cardViewScreenWidth = false
+  constrainItemsWidth = false
+
+[sitemap]
+  excludedKinds = ["taxonomy", "term"]
+
+[taxonomy]
+  showTermCount = true
+  showHero = false
+  # heroStyle = "background" # valid options: basic, big, background, thumbAndBackground
+  showBreadcrumbs = false
+  showViews = false
+  showLikes = false
+  showTableOfContents = false
+  cardView = false
+
+[term]
+  showHero = false
+  # heroStyle = "background" # valid options: basic, big, background, thumbAndBackground
+  showBreadcrumbs = false
+  showViews = false
+  showLikes = false
+  showTableOfContents = true
+  groupByYear = false
+  cardView = false
+  cardViewScreenWidth = false
+
+[firebase]
+  # apiKey = "XXXXXX"
+  # authDomain = "XXXXXX"
+  # projectId = "XXXXXX"
+  # storageBucket = "XXXXXX"
+  # messagingSenderId = "XXXXXX"
+  # appId = "XXXXXX"
+  # measurementId = "XXXXXX"
+
+[fathomAnalytics]
+  # site = "ABC12345"
+  # domain = "llama.yoursite.com"
+
+[umamiAnalytics]
+  # websiteid = "ABC12345"
+  # domain = "llama.yoursite.com"
+  # dataDomains = "yoursite.com,yoursite2.com"
+  # scriptName = ""
+  # enableTrackEvent = true
+
+[selineAnalytics]
+  # token = "XXXXXX"
+  # enableTrackEvent = true
+
+[buymeacoffee]
+  # identifier = ""
+  # globalWidget = true
+  # globalWidgetMessage = "Hello"
+  # globalWidgetColor = "#FFDD00"
+  # globalWidgetPosition = "right"
+
+[verification]
+  # google = ""
+  # bing = ""
+  # pinterest = ""
+  # yandex = ""
+  # fediverse = ""
+
+[rssnext]
+  # feedId = ""
+  # userId = ""
+
+[advertisement]
+  # adsense = ""

website/hugo.toml

@@ -0,0 +1,3 @@
+baseURL = 'https://example.org/'
+languageCode = 'en-us'
+title = 'My New Hugo Site'