[Hugo Blog] OCI + GitHub Actions Deployment

Sat, 21 Feb 2026 00:00:00 +0900

Overview

This blog is built using the Hugo static site generator and automatically deployed to an Oracle Cloud Infrastructure (OCI) Free Tier server via GitHub Actions.

Architecture

Write Markdown locally
 ↓
GitHub Push (main branch)
 ↓
GitHub Actions (Hugo build)
 ↓
SSH + rsync deployment
 ↓
OCI Server (Nginx)
 ↓
https://blog.fcoinfup.com

Tech Stack

Component	Technology
Static Site Generator	Hugo
Theme	PaperMod
CI/CD	GitHub Actions
Server	OCI Free Tier (ARM)
Web Server	Nginx
Deployment Method	SSH + rsync

Configuration Management

The project centrally manages settings through the .blogrc.yaml file.

server:
 host: oci-yarang-ec1.fcoinfup.com
 user: ubuntu
 deploy_path: /var/www/blog

blog:
 url: https://blog.fcoinfup.com
 title: "Yarang's Tech Lair"
 author: yarang

GitHub Secrets synchronization is automated through the scripts/sync-secrets.sh script.

Deployment Pipeline

The GitHub Actions workflow executes in the following steps:

Checkout: Clone repository (including submodules)
Hugo Setup: Install Hugo extended version
Build: Run hugo --minify
Deploy: Transfer to OCI server via rsync

# .github/workflows/deploy.yml
- name: Deploy to OCI server
 run: |
 rsync -avz --delete \
 -e "ssh -i ~/.ssh/deploy_key" \
 public/ \
 ${{ secrets.OCI_USER }}@${{ secrets.OCI_HOST }}:${{ secrets.OCI_DEPLOY_PATH }}

Post Writing Workflow

# Create new post
hugo new content/posts/my-new-post.md

# Local preview
hugo server -D

# Commit and push (auto deploy)
git add .
git commit -m "Add new post"
git push

Security Considerations

SSH keys use ED25519 algorithm
Private keys are securely stored in GitHub Secrets
Nginx security header configuration (X-Frame-Options, X-Content-Type-Options, etc.)

References

Korean Version: 한국어 버전

Infrastructure on Yarang's Tech Lair