Merge pull request #174 from tuna2134/renovate/docker-setup-buildx-action-4.x

chore(deps): update docker/setup-buildx-action action to v4

.dockerignore

@@ -0,0 +1,41 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.*
+.yarn/*
+!.yarn/patches
+!.yarn/plugins
+!.yarn/releases
+!.yarn/versions
+
+# testing
+/coverage
+
+# next.js
+/.next/
+/out/
+
+# production
+/build
+
+# misc
+.DS_Store
+*.pem
+
+# debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+.pnpm-debug.log*
+
+# env files (can opt-in for committing if needed)
+.env*
+
+# vercel
+.vercel
+
+# typescript
+*.tsbuildinfo
+next-env.d.ts

.github/workflows/docker.yml

@@ -0,0 +1,30 @@
+name: Push to github container register
+
+on:
+  push:
+    branches: [master]
+  workflow_dispatch:
+
+jobs:
+  push-docker:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v6
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v4
+        with:
+          registry: git.neody.ad.jp
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Build and push image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: |
+            git.neody.ad.jp/tuna2134/cecilia

.github/workflows/pr.yml

@@ -0,0 +1,32 @@
+name: Renovatebot auto-merge
+
+on:
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  renovatebot:
+    runs-on: ubuntu-latest
+    if: github.actor == 'renovate[bot]'
+    steps:
+    - uses: actions/checkout@v6
+    - uses: pnpm/action-setup@v4
+      with:
+        version: latest
+    - uses: actions/setup-node@v6
+      with:
+        node-version: 24.x
+        cache: pnpm
+    - name: Build checking
+      run: |
+        pnpm install --frozen-lockfile
+        pnpm build
+    - name: Enable auto-merge for Renovate PRs
+      run: gh pr merge --auto --merge "$PR_URL"
+      env:
+        PR_URL: ${{ github.event.pull_request.html_url }}
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Dockerfile

@@ -1,4 +1,4 @@
-FROM node:22-slim AS builder
+FROM node:24-slim AS builder
 
 WORKDIR /src
 
@@ -9,17 +9,16 @@ COPY pnpm-lock.yaml package.json .
 RUN pnpm install --frozen-lockfile
 
 COPY . .
-RUN --mount=type=cache,target=/src/.next pnpm build \
-    && cp -r /src/.next /complete
+RUN pnpm build
 
-FROM gcr.io/distroless/nodejs22-debian12
+FROM gcr.io/distroless/nodejs24-debian12
 
-ENV NODE_ENV=production
+# ENV NODE_ENV=production
 WORKDIR /usr/src
 
 COPY --chown=nonroot:nonroot ./public ./public
-COPY --from=builder --chown=nonroot:nonroot /complete/standalone ./
-COPY --from=builder --chown=nonroot:nonroot /complete/static ./.next/static
+COPY --from=builder --chown=nonroot:nonroot /src/.next/standalone ./
+COPY --from=builder --chown=nonroot:nonroot /src/.next/static ./.next/static
 
 USER nonroot
 EXPOSE 3000

README.md

@@ -1 +1 @@
-cecilia project
+# cecilia project

app/(pages)/blogs/[slug]/page.tsx

@@ -19,7 +19,7 @@ export default async function Page({ params }: Props) {
                 </h2>
             </div>
             <p className="text-gray-600/80">作成日時：{metadata.datetime}</p>
-            <div className="prose mt-2">
+            <div className="prose mt-2 max-w-none">
                 <Post />
             </div>
         </>

app/layout.tsx

@@ -1,6 +1,7 @@
 import type { Metadata } from "next";
 import { Geist, Geist_Mono, Noto_Sans_JP } from "next/font/google";
 import "./globals.css";
+import Script from "next/script";
 
 const geistSans = Geist({
     variable: "--font-geist-sans",
@@ -33,6 +34,8 @@ export default function RootLayout({
                 className={`${geistSans.variable} ${geistMono.variable} ${notoSansJP.variable} antialiased`}
             >
                 {children}
+                <Script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-8715826596324259"
+     crossOrigin="anonymous"></Script>
             </body>
         </html>
     );

app/page.tsx

@@ -8,7 +8,7 @@ export default function Home() {
             <PageHeader.default />
             <Header />
             <div className="mx-auto mt-6 max-w-3xl px-4">
-                <p className="mb-3 border-b-4 border-indigo-600 bg-indigo-600/20 p-1 text-2xl font-bold">
+                <p className="mb-3 p-1 text-2xl font-bold tracking-wider">
                     歴史
                 </p>
                 <Timeline
@@ -37,3 +37,5 @@ export default function Home() {
         </>
     );
 }
+
+export const dynamic = 'force-dynamic'

blogs/20251123.mdx

@@ -0,0 +1,67 @@
+export const metadata = {
+    title: "TLS証明書をGoogle Trust Serviceに変えてみた",
+    description: "TLS証明書をLet's EncryptからGoogle Trust Serviceに変えてみた話",
+    datetime: "2025/11/23",
+};
+
+## 事前説明
+私はサイトをKubernetes上で動かしており、cert-managerを使ってLet's EncryptのSSL証明書を発行していました。
+
+## アカウントの発行
+```
+gcloud init
+```
+でまず環境を初期化
+
+そののち
+```
+gcloud services enable publicca.googleapis.com
+```
+でGoogle Trust Serviceを有効化
+
+次にアカウントの発行
+```
+gcloud publicca external-account-keys create
+```
+
+そうすると以下のように返される。
+```
+Created an external account key
+[b64MacKey: <eab-secret>
+keyId: <key-id>]
+```
+次の`cert-managerの例`で使うからメモしておく。
+
+keyをsecretに登録
+```sh
+kubectl create secret generic eab-secret \
+    --from-literal secret=<eab-secret> \
+    -n cert-manager
+```
+
+## cert-managerの例
+```yaml
+# issuer-lets-encrypt-staging.yaml
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: gts-prod
+spec:
+  acme:
+    server: https://dv.acme-v02.api.pki.goog/directory
+    email: <mail address>
+    externalAccountBinding:
+      keyID: <key-id>
+      keySecretRef:
+        name: eab-secret
+        key: secret
+    privateKeySecretRef:
+      name: example-issuer-account-key
+    solvers:
+    - http01:
+        ingress:
+          ingressClassName: nginx
+```
+
+## 最後に
+このサイトもGoogle Trust Service使っています。

blogs/20260101.mdx

@@ -0,0 +1,11 @@
+export const metadata = {
+    title: "あけましておめでとうございます。",
+    description: "謹賀新年あけましておめでとうございます。今年もよろしくお願いします。",
+    datetime: "2026/01/01",
+};
+
+謹賀新年あけましておめでとうございます。今年もよろしくお願いします。
+
+今年はneodylandのインフラの規模を拡大目指します。さらにクラウドの開発をやってみたいです。
+
+他にも色々と挑戦して、色々学んでいきます！

blogs/k8s.mdx

@@ -0,0 +1,31 @@
+export const metadata = {
+    title: "Kubernetes構築ansibleスクリプト",
+    description: "高可用性クラスターを簡単に構築するためのansibleスクリプトです。",
+    datetime: "2025/05/07",
+};
+
+Kubernetes構築ansibleスクリプトの使い方
+
+## 環境のセットアップ
+uvをインスコします
+```sh
+curl -LsSf https://astral.sh/uv/install.sh | sh
+```
+
+## パッケージなどをインストール
+```sh
+uv sync
+```
+
+## virtualenvに没入
+```
+source .venv/bin/activate
+```
+
+## configの変更
+`inventory`の内容をよしなに変更してね
+
+## 実行
+```
+ansible-playbook -i inventory full.yml
+```

blogs/suimin.mdx

@@ -0,0 +1,21 @@
+export const metadata = {
+    title: "WSLを吹っ飛ばした。",
+    description: "WSLのディスクが最近肥大化してきたので、吹っ飛ばします。",
+    datetime: "2025/06/16",
+};
+
+## 問題
+Next.js触ったり、Rustを触ったりしているとキャッシュとかでディスクが圧迫する。
+それらを取り除かないといけないから、リセットすることに決めた。
+
+## まずWSLを破壊
+```sh
+wsl --unregister=Ubuntu
+```
+
+## 再構築
+```sh
+wsl --install=Ubuntu
+```
+
+以上！

blogs/vyos-tmp.mdx

@@ -0,0 +1,73 @@
+export const metadata = {
+    title: "仮置き場",
+    description: "仮置き場",
+    datetime: "2025/11/06",
+};
+
+```sh
+# 1. プライベートIPアドレスのフィルター
+set policy prefix-list6 BGP-IN rule 10 action 'permit'
+set policy prefix-list6 BGP-IN rule 10 prefix '3ffe::/16'
+set policy prefix-list6 BGP-IN rule 10 le 128
+set policy prefix-list6 BGP-IN rule 20 action 'permit'
+set policy prefix-list6 BGP-IN rule 20 prefix '2001:db8::/32'
+set policy prefix-list6 BGP-IN rule 20 le 128
+set policy prefix-list6 BGP-IN rule 30 action 'permit'
+set policy prefix-list6 BGP-IN rule 30 prefix 'fe00::/8'
+set policy prefix-list6 BGP-IN rule 30 le 128
+set policy prefix-list6 BGP-IN rule 40 action 'permit'
+set policy prefix-list6 BGP-IN rule 40 prefix '::/0'
+set policy prefix-list6 BGP-IN rule 40 le 15
+set policy prefix-list6 BGP-IN rule 50 action 'permit'
+set policy prefix-list6 BGP-IN rule 50 prefix '::/128'
+set policy prefix-list6 BGP-IN rule 50 ge 128
+
+## 2. 1.のフィルターを通して、問題なかったものを許可する場所
+set policy route-map BGP-IN rule 10 action 'deny'
+set policy route-map BGP-IN rule 10 match ipv6 address prefix-list 'BGP-IN'
+set policy route-map BGP-IN rule 20 action 'permit'
+
+## 3. 広報するIP
+## `annouce-ip`: 広報する予定のIP
+set protocols static route6 <annouce-ip> blackhole distance '254'
+
+## 4. BGP接続設定(upstream用)
+## `my-asn`: 自分のASN
+## `neighbor-asn`: 相手のASN
+## `neighbor-ip`: 相手の境界IP
+## `my-border-ip`: 自分の境界IP
+## `annouce-ip`: 広報する予定のIP
+## `router-id`: ルーターID
+set protocols bgp system-as <my-asn>
+set protocols bgp neighbor <neighbor-ip> remote-as <neighbor-asn>
+set protocols bgp neighbor <neighbor-ip> update-source <my-border-ip>
+set protocols bgp neighbor <neighbor-ip> address-family ipv6-unicast route-map import 'BGP-IN'
+set protocols bgp neighbor <neighbor-ip> address-family ipv6-unicast
+set protocols bgp address-family ipv6-unicast network <annouce-ip>
+set protocols bgp parameters router-id <router-id>
+
+## 5. BGP接続設定(ほかの自分のBGPルーター)
+## 冗長化をする場合、この設定をいれるといいでしょう。
+## `my-asn`: 自分のASN
+## `neighbor-ip`: 他ルーターIP
+## `my-border-ip`: 自分のルーターIP
+set protocols bgp neighbor <neighbor-ip> remote-as <my-asn>
+set protocols bgp neighbor <neighbor-ip> update-source <my-border-ip>
+set protocols bgp neighbor <neighbor-ip> address-family ipv6-unicast
+
+## 6. IPの設定
+## `router-ip`: ルーターIP(prefixは/128)
+set interfaces lo lo address <router-ip>
+
+## 7. OSPFの設定
+## 予期せぬ事態にEthernetがダウンしたときに備えて、
+## 5.のiBGPの`my-border-ip`は6.で設定したアドレスを使いましょう。
+## `interface`: ほかのルーターに接続されているL2SW
+## `rid`: 4.で設定した`router-id`を設定してあげてください
+set protocols ospfv3 interface <interface> area 0.0.0.0
+set protocols ospfv3 interface lo area 0.0.0.0
+set protocols ospfv3 interface lo passive
+set protocols ospfv3 parameters router-id <rid>
+set protocols ospfv3 redistribute static
+set protocols ospfv3 default-information originate
+```

components/pages/home/header.tsx

@@ -1,5 +1,5 @@
 import Image from "next/image";
-import { ArrowDown, Github, PageDown, X } from "iconoir-react";
+import { ArrowDown, Github, X } from "iconoir-react";
 import Link from "next/link";
 
 const SNSIcons = [
@@ -51,3 +51,5 @@ const Header: React.FC = async () => {
 };
 
 export default Header;
+
+export const dynamic = "force-dynamic";

package.json

@@ -12,21 +12,21 @@
   "dependencies": {
     "@mdx-js/loader": "^3.1.0",
     "@mdx-js/react": "^3.1.0",
-    "@next/mdx": "^15.3.1",
+    "@next/mdx": "^16.0.0",
     "@types/mdx": "^2.0.13",
     "iconoir-react": "^7.11.0",
-    "next": "15.3.2",
+    "next": "16.1.6",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },
   "devDependencies": {
     "@tailwindcss/postcss": "^4",
     "@tailwindcss/typography": "^0.5.16",
-    "@types/node": "^22.0.0",
+    "@types/node": "^24.0.0",
     "@types/react": "^19",
     "@types/react-dom": "^19",
     "prettier": "^3.5.3",
-    "prettier-plugin-tailwindcss": "^0.6.11",
+    "prettier-plugin-tailwindcss": "^0.7.0",
     "tailwindcss": "^4",
     "typescript": "^5"
   }

public/ads.txt

@@ -0,0 +1 @@
+google.com, pub-8715826596324259, DIRECT, f08c47fec0942fa0

tsconfig.json

@@ -1,7 +1,11 @@
 {
   "compilerOptions": {
     "target": "ES2017",
-    "lib": ["dom", "dom.iterable", "esnext"],
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
@@ -11,7 +15,7 @@
     "moduleResolution": "bundler",
     "resolveJsonModule": true,
     "isolatedModules": true,
-    "jsx": "preserve",
+    "jsx": "react-jsx",
     "incremental": true,
     "plugins": [
       {
@@ -19,9 +23,20 @@
       }
     ],
     "paths": {
-      "@/*": ["./*"]
+      "@/*": [
+        "./*"
+      ]
     }
   },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts", "blogs/hello.mdx"],
-  "exclude": ["node_modules"]
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    "blogs/*.mdx",
+    ".next/dev/types/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ]
 }