Complete Guide: Hugo Book + Gruvbox + Caddy + GitHub#

┌──────────────┐         ┌──────────────────┐       ┌───────────────┐
│ GitHub Repo  │─webhook─▶│  Hugo + Book     │──────▶│ Caddy (Serve) │──▶ Users
│ (Markdown)   │         │ /home/debian/hugs│       │ Auto HTTPS    │
└──────────────┘         └──────────────────┘       └───────────────┘

# Hugo Extended (required for SCSS)
wget https://github.com/gohugoio/hugo/releases/download/v0.140.1/hugo_extended_0.140.1_linux-amd64.deb
sudo dpkg -i hugo_extended_0.140.1_linux-amd64.deb
hugo version  # Must say "extended"

# Caddy
sudo apt install -y debian-keyring debian-archive-keyring apt-transport-https curl
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list
sudo apt update
sudo apt install caddy

# Git and webhook listener
sudo apt install git webhook

mkdir -p /home/debian/hugs
cd /home/debian/hugs

hugo new site . --force
git init
git branch -M main

# Add Hugo Book theme
git submodule add --depth=1 https://github.com/alex-shpak/hugo-book.git themes/hugo-book

rm -f hugo.toml

baseURL: "https://yourdomain.com"
languageCode: "en-us"
title: "Knowledge Hub"
theme: "hugo-book"

enableGitInfo: true
enableEmoji: true

params:
  BookTheme: "auto"
  BookToC: true
  BookSection: "/"
  BookSearch: true
  BookDateFormat: "Jan 2, 2006"
  BookComments: false
  BookRepo: ""

markup:
  goldmark:
    renderer:
      unsafe: true
  highlight:
    style: gruvbox-dark
    codeFences: true
    guessSyntax: true
  tableOfContents:
    startLevel: 2
    endLevel: 4

outputs:
  home:
    - HTML
    - RSS
    - JSON

menu: {}

---
title: "Welcome"
---

# 📚 Welcome to the Knowledge Hub

A free and open collection of notes, guides, and references — built for anyone looking to learn, explore, and grow.

---

## What you'll find here

This site is a living knowledge base covering topics in **Linux**, **DevOps**, **Programming**, **Networking**, and more. Whether you're a beginner taking your first steps or an experienced practitioner looking for a quick reference, there's something here for you.

### 🧭 Browse by topic

- **Linux** — System administration, commands, configuration, and troubleshooting
- **DevOps** — CI/CD, containers, infrastructure as code, and automation
- **Programming** — Languages, patterns, tools, and best practices
- **Networking** — Protocols, firewalls, DNS, and connectivity

---

## Philosophy

> Knowledge should be accessible to everyone. These notes are written to be clear, practical, and straight to the point — no gatekeeping, no fluff.

Pick a topic from the sidebar and start exploring. Happy learning. 🚀

---
title: "Linux"
weight: 1
bookCollapseSection: true
---

---
title: "DevOps"
weight: 2
bookCollapseSection: true
---

---
title: "Programming"
weight: 3
bookCollapseSection: true
---

---
title: "Networking"
weight: 4
bookCollapseSection: true
---

---
title: "{{ replace .Name \"-\" \" \" | title }}"
date: {{ .Date }}
draft: true
weight: 10
---

## Overview

Write your notes here...

:root {
  --body-background: #282828 !important;
  --body-font-color: #ebdbb2 !important;
  --color-link: #83a598 !important;
  --color-visited-link: #d3869b !important;
}

html, body {
  background: #282828 !important;
  color: #ebdbb2 !important;
}

.book-menu, .book-menu nav {
  background: #1d2021 !important;
}

.book-menu a {
  color: #d5c4a1 !important;
}

.book-menu a:hover {
  color: #fabd2f !important;
}

.book-page {
  background: #282828 !important;
  color: #ebdbb2 !important;
}

.container, .container main {
  background: #282828 !important;
}

h1, h2, h3, h4, h5, h6 {
  color: #fe8019 !important;
}

a {
  color: #83a598 !important;
}

a:hover {
  color: #8ec07c !important;
}

code:not(pre code) {
  background: #3c3836 !important;
  color: #b8bb26 !important;
  padding: 2px 5px;
  border-radius: 3px;
}

pre {
  background: #1d2021 !important;
  border: 1px solid #504945 !important;
  border-radius: 6px;
}

pre code {
  background: transparent !important;
  color: #ebdbb2 !important;
}

.book-toc {
  background: #282828 !important;
}

.book-toc a {
  color: #a89984 !important;
}

.book-toc a:hover {
  color: #fabd2f !important;
}

table th {
  background: #3c3836 !important;
  color: #fabd2f !important;
  border-color: #504945 !important;
}

table td {
  border-color: #504945 !important;
  color: #d5c4a1 !important;
}

table tr:nth-child(even) {
  background: #32302f !important;
}

blockquote {
  border-left: 4px solid #8ec07c !important;
  background: #32302f !important;
  color: #d5c4a1 !important;
}

.book-search input {
  background: #3c3836 !important;
  color: #ebdbb2 !important;
  border: 1px solid #665c54 !important;
}

.book-search input::placeholder {
  color: #a89984 !important;
}

.book-brand {
  color: #fbf1c7 !important;
}

.book-header {
  background: #1d2021 !important;
}

hr {
  border-color: #504945 !important;
}

.book-footer {
  border-color: #504945 !important;
}

.markdown {
  color: #ebdbb2 !important;
}

::selection {
  background: #83a598;
  color: #282828;
}

<link rel="stylesheet" href="/css/gruvbox.css">

public/
resources/
.hugo_build.lock

sudo groupadd webdata
sudo usermod -aG webdata debian
sudo usermod -aG webdata caddy

sudo chown -R debian:webdata /home/debian/hugs
sudo find /home/debian/hugs -type d -exec chmod 2750 {} \;
sudo find /home/debian/hugs -type f -exec chmod 640 {} \;
chmod 711 /home/debian

# Check
sudo systemctl cat caddy | grep ProtectHome

sudo systemctl edit caddy

[Service]
ProtectHome=false
ReadOnlyPaths=/home/debian/hugs/public

sudo systemctl daemon-reload
sudo systemctl restart caddy

yourdomain.com {
    encode zstd gzip

    header {
        X-Content-Type-Options "nosniff"
        X-Frame-Options "DENY"
        Referrer-Policy "strict-origin-when-cross-origin"
        Strict-Transport-Security "max-age=31536000; includeSubDomains"
        -Server
    }

    # Webhook (must be before file_server)
    route /hooks/* {
        reverse_proxy localhost:9000
    }

    # Static site
    root * /home/debian/hugs/public
    file_server

    @static {
        path *.css *.js *.svg *.png *.jpg *.jpeg *.gif *.woff *.woff2 *.ico *.webp
    }
    header @static Cache-Control "public, max-age=31536000, immutable"

    handle_errors {
        @404 expression {http.error.status_code} == 404
        rewrite @404 /404.html
        file_server
    }

    log {
        output file /var/log/caddy/notes-access.log {
            roll_size 10mb
            roll_keep 5
        }
        format json
    }
}

www.yourdomain.com {
    redir https://yourdomain.com{uri} permanent
}

sudo mkdir -p /var/log/caddy
sudo chown caddy:caddy /var/log/caddy
sudo caddy fmt --overwrite /etc/caddy/Caddyfile
sudo caddy validate --config /etc/caddy/Caddyfile
sudo systemctl enable caddy
sudo systemctl restart caddy

#!/bin/bash
set -euo pipefail

SITE_DIR="/home/debian/hugs"
LOG="/var/log/hugo-deploy.log"

echo "[$(date '+%Y-%m-%d %H:%M:%S')] Deploy triggered" >> "$LOG"

cd "$SITE_DIR"
git fetch origin main
git reset --hard origin/main
git submodule update --init --recursive

hugo --minify --gc 2>> "$LOG"

chown -R debian:webdata "$SITE_DIR/public"
find "$SITE_DIR/public" -type d -exec chmod 2750 {} \;
find "$SITE_DIR/public" -type f -exec chmod 640 {} \;

echo "[$(date '+%Y-%m-%d %H:%M:%S')] Deploy complete" >> "$LOG"

chmod 750 /home/debian/hugs/deploy.sh
sudo touch /var/log/hugo-deploy.log
sudo chown debian:webdata /var/log/hugo-deploy.log
sudo chmod 664 /var/log/hugo-deploy.log

#!/bin/bash
cd /home/debian/hugs
hugo --minify --gc
chown -R debian:webdata /home/debian/hugs/public
find /home/debian/hugs/public -type d -exec chmod 2750 {} \;
find /home/debian/hugs/public -type f -exec chmod 640 {} \;
echo "✅ Site rebuilt"

chmod 750 /home/debian/hugs/rebuild.sh

openssl rand -hex 20
# Save this output — used in two places below

[
  {
    "id": "hugo-deploy",
    "execute-command": "/home/debian/hugs/deploy.sh",
    "command-working-directory": "/home/debian/hugs",
    "trigger-rule": {
      "and": [
        {
          "match": {
            "type": "payload-hmac-sha256",
            "secret": "YOUR_SECRET_HERE",
            "parameter": {
              "source": "header",
              "name": "X-Hub-Signature-256"
            }
          }
        },
        {
          "match": {
            "type": "value",
            "value": "refs/heads/main",
            "parameter": {
              "source": "payload",
              "name": "ref"
            }
          }
        }
      ]
    }
  }
]

[Unit]
Description=Webhook listener for Hugo deployment
After=network.target

[Service]
Type=simple
User=debian
Group=debian
ExecStart=/usr/bin/webhook -hooks /etc/webhook/hooks.json -port 9000 -verbose
Restart=on-failure
RestartSec=5

[Install]
WantedBy=multi-user.target

sudo systemctl daemon-reload
sudo systemctl enable webhook
sudo systemctl start webhook
sudo systemctl status webhook  # Should say "active (running)"

curl -s -o /dev/null -w "%{http_code}" http://localhost:9000/hooks/hugo-deploy
# Should return 200 or 405 (not 404 or connection refused)

cd /home/debian/hugs
git add .
git commit -m "Initial Hugo Book site with Gruvbox theme"
git remote add origin git@github.com:yourusername/hugs.git
git push -u origin main

cd /home/debian/hugs
hugo --minify --gc
~/hugs/rebuild.sh

sudo ufw allow 80/tcp
sudo ufw allow 443/tcp
sudo ufw allow 22/tcp
sudo ufw enable

cd /home/debian/hugs
hugo new content/linux/my-note.md
nano content/linux/my-note.md

git add .
git commit -m "Add my-note"
git push

rm content/section/note.md
git add -A
git commit -m "Remove note"
git push

mkdir -p content/newsection

---
title: "New Section"
weight: 5
bookCollapseSection: true
---

~/hugs/rebuild.sh

---
title: "Note Title"
date: 2026-08-08
draft: false
weight: 10
---

---
title: "Note Title"
date: 2026-08-08
draft: false
weight: 10
bookCollapseSection: true   # For _index.md: collapse in sidebar
bookHidden: true            # Hide from sidebar but accessible via URL
bookToC: false              # Disable TOC for this page
---

/home/debian/hugs/
├── .gitignore
├── archetypes/
│   └── default.md
├── content/
│   ├── _index.md              # Homepage
│   ├── linux/
│   │   ├── _index.md
│   │   └── *.md
│   ├── devops/
│   │   ├── _index.md
│   │   └── *.md
│   ├── programming/
│   │   ├── _index.md
│   │   └── *.md
│   └── networking/
│       ├── _index.md
│       └── *.md
├── layouts/
│   └── partials/
│       └── docs/
│           └── inject/
│               └── head.html  # Loads gruvbox.css
├── static/
│   └── css/
│       └── gruvbox.css        # Gruvbox dark theme
├── themes/
│   └── hugo-book/             # Git submodule
├── deploy.sh
├── rebuild.sh
└── hugo.yaml