Merge branch 'main' of https://git.scottyah.com/public/scottyah-blog

Uses buildah to build/push to Harbor, then kubectl apply for deployment.
Replaces the old Woodpecker CI pipeline.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.gitea/workflows/deploy.yaml

@@ -0,0 +1,42 @@
+name: Build and Deploy
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    container:
+      image: quay.io/buildah/stable
+    steps:
+      - name: Checkout
+        run: |
+          git clone --depth 1 --branch "${{ github.ref_name }}" "${{ github.server_url }}/${{ github.repository }}.git" .
+          git checkout "${{ github.sha }}"
+
+      - name: Build image
+        run: |
+          IMAGE=harbor.scottyah.com/scottyah/blog
+          buildah --isolation chroot bud -t $IMAGE:${{ github.sha }} -t $IMAGE:latest .
+
+      - name: Push image
+        run: |
+          IMAGE=harbor.scottyah.com/scottyah/blog
+          buildah login --tls-verify=false -u "$HARBOR_USERNAME" -p "$HARBOR_PASSWORD" harbor.scottyah.com
+          buildah push --tls-verify=false $IMAGE:${{ github.sha }}
+          buildah push --tls-verify=false $IMAGE:latest
+        env:
+          HARBOR_USERNAME: ${{ secrets.HARBOR_USERNAME }}
+          HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}
+
+      - name: Deploy
+        run: |
+          curl -LO "https://dl.k8s.io/release/$(curl -Ls https://dl.k8s.io/release/stable.txt)/bin/linux/amd64/kubectl"
+          chmod +x kubectl
+          mkdir -p ~/.kube
+          echo "${{ secrets.KUBECONFIG_DATA }}" | base64 -d > ~/.kube/config
+          sed -i "s|harbor.scottyah.com/scottyah/blog:latest|harbor.scottyah.com/scottyah/blog:${{ github.sha }}|" k8s.yaml
+          ./kubectl apply -f k8s.yaml
+          ./kubectl rollout status deployment/blog-dep -n blog --timeout=120s

hugo-content/content/posts/CICD.md

@@ -0,0 +1,7 @@
+---
+title: "CICD"
+date: 2026-03-09T19:57:00-07:00
+draft: false
+---
+
+Finally got some CICD working- woodpecker was useless, but now gitea has Actions. With some configuration, I can now push to some repos and the internet gets the updates. My days of ssh-ing (via tailscale) and running ship.sh scripts might be over. One more script replaced by lots of yaml, hope, and prayers.

hugo-content/content/posts/urban-attic.md

@@ -0,0 +1,11 @@
+---
+title: "Urban Attic"
+date: 2026-02-13T13:48:46-08:00
+draft: false
+---
+
+Just an update post on a project I'm really excited about- a whole inventory management system for a small business that tracks totes and storage. I'll put up a demo version of it at some point so anyone can play around with it, but this is the most official one- I've even signed a contract for revenue sharing. 
+
+It's gotten pretty complex, with Customer management, Tote management, upcoming deliveries and requests in the admin page, a dashboard for customers to manage their totes, keep records of contents (encrypted), update payments, addresses, etc. and even a scheduling system. 
+
+Stay tuned!

k8s.yaml

@@ -49,19 +49,12 @@ spec:
   ingressClassName: traefik
   tls:
   - hosts:
-    - scottyah.com
+    - blog.scottyah.com
     secretName: scottyah-tls
+  - hosts:
+    - scotthatlen.com
+    secretName: scotthatlen-tls
   rules:
-  - host: scottyah.com
-    http:
-      paths:
-      - path: /
-        pathType: Prefix
-        backend:
-          service:
-            name: blog-svc
-            port:
-              number: 80
   - host: blog.scottyah.com
     http:
       paths: