blog.whhwsz.com 部署指南

host blog.whhwsz.com
# blog.whhwsz.com has address 34.4.110.76

docker ps
# CONTAINER ID   IMAGE                       NAMES
# c3fb29374f3a   nginx:alpine                nginx
# e9dbac0987b6   eceasy/cli-proxy-api:latest cli-proxy-api

cat > /home/web/conf.d/blog.whhwsz.com.conf << 'EOF'
server {
    listen 80;
    listen [::]:80;
    server_name blog.whhwsz.com;

    root /var/www/html;
    index index.html;

    # === 旧文件名 301 跳转（重命名后保持向后兼容）===
    location = /markitdown-guide.html {
        return 301 /20260621_markitdown_guide.html;
    }
    location = /cli-proxy-api-guide.html {
        return 301 /20260619_cli_proxy_api_guide.html;
    }
    location = /blog-deployment-guide.html {
        return 301 /20260620_blog_deployment_guide.html;
    }
    location = /ssh-troubleshooting.html {
        return 301 /20260620_ssh_troubleshooting_guide.html;
    }

    location / {
        try_files $uri $uri/ =404;
    }

    location ^~ /.well-known/acme-challenge/ {
        default_type text/plain;
        root /var/www/letsencrypt;
    }
}
EOF

docker exec nginx nginx -t
docker exec nginx nginx -s reload

$content = Get-Content -Raw "source.md"
$content = $content -replace 'sk-\S+','***'
$content = $content -replace '(?:\d{1,3}\.){3}\d{1,3}','[IP REDACTED]'
$content = $content -replace '(?i)(api-keys:|secret-key:|密码|机密)','***'
Set-Content -Path "sanitized.md" -Value $content -Encoding UTF8

scp -P 22 -o StrictHostKeyChecking=no -i "key_file" sanitized.md user@34.4.110.76:/tmp/article.md

# 首次需安装 Pygments 语法高亮引擎
python3 -m pip install pygments

# 执行转换（md2blog.py 位于 /tmp/，需事先上传，参见第 3 节）
python3 /tmp/md2blog.py /tmp/article.md /home/web/html/yyyymmdd_article_name.html

# 默认输入 /tmp/article.md，输出到 /home/web/html/yyyymmdd_article_name.html
python3 /tmp/md2blog.py /tmp/my-article.md /home/web/html/yyyymmdd_article_name.html

curl -sI https://blog.whhwsz.com
# HTTP/1.1 200 OK

curl -sI https://blog.whhwsz.com/20260619_cli_proxy_api_guide.html
# HTTP/1.1 200 OK

curl -s https://blog.whhwsz.com | head -8
# <!DOCTYPE html>
# <html lang="zh-CN">

# 1. 本地脱敏
$src = "D:\workspace\new-article.md"
$dst = "D:\workspace\new-article_sanitized.md"
$content = Get-Content -Raw $src
$content = $content -replace 'sk-\S+','***'
$content = $content -replace '(?:\d{1,3}\.){3}\d{1,3}','[IP REDACTED]'
$content = $content -replace '(?i)(api-keys:|secret-key:|密码|机密)','***'
Set-Content -Path $dst -Value $content -Encoding UTF8

# 2. SCP 上传脱敏的 Markdown 文件到服务器
scp -P 22 -o StrictHostKeyChecking=no -i "key_file" $dst user@34.4.110.76:/tmp/article.md

# 3. 确保 md2blog.py 在服务器上存在
#   若缺失，从本地同步
scp -P 22 -o StrictHostKeyChecking=no -i "key_file" `
    "D:\OneDrive\文档\codex\blog\20260620_blog.whhwsz.com部署指南_md2blog.py" `
    user@34.4.110.76:/tmp/md2blog.py

# 4. 服务器端转换（输出文件名以 yyyymmdd_ 开头）
ssh -p 22 -i "key_file" user@34.4.110.76 `
    "python3 /tmp/md2blog.py /tmp/article.md /home/web/html/yyyymmdd_article_name.html"

# 5. 更新首页索引
#    在 index.html 的 <div class="container"> 内按时间倒序添加新的 <div class="post"> 条目

# 6. 如有旧文件名 → 添加 Nginx 301 跳转（参见 3.3 节）并重载

location = /old-file-name.html {
    return 301 /yyyymmdd_new_file_name.html;
}

docker exec nginx nginx -t && docker exec nginx nginx -s reload

# 错误：$uri 在本地被展开为空
ssh user@host "try_files $uri $uri/ =404"

# 正确方案：远程 heredoc 加单引号
# cat > file << 'EOF' → bash 不做变量展开

# 错误：default_type "text/plain" 在 heredoc 中被 SSH/PowerShell 截断
# 正确：去掉引号
default_type text/plain;

# 错误：SSH 命令中包含 Python 双引号字符串
# 正确做法：本地写 .py 文件，SCP 上传，远程执行

# Nginx 在容器内，不能用宿主机路径
# 错误：nginx -t              → host 上找不到
# 正确：docker exec nginx nginx -t

# SCP 上传后文件属主 root:root，nginx 非 root 用户可能无法读取
# 如果有 403 错误，执行：
chmod 644 /home/web/html/*