Merge pull request #182 from tuna2134/renovate/nextjs-monorepo

fix(deps): update nextjs monorepo to v16.2.1

.github/workflows/docker.yml

@@ -12,21 +12,19 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v5
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+      - uses: actions/checkout@v6
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: git.neody.ad.jp
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
       - name: Build and push image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: true
           tags: |
-            ghcr.io/${{ github.repository }}
+            git.neody.ad.jp/tuna2134/cecilia

.github/workflows/pr.yml

@@ -13,8 +13,8 @@ jobs:
     runs-on: ubuntu-latest
     if: github.actor == 'renovate[bot]'
     steps:
-    - uses: actions/checkout@v5
-    - uses: pnpm/action-setup@v4
+    - uses: actions/checkout@v6
+    - uses: pnpm/action-setup@v5
       with:
         version: latest
     - uses: actions/setup-node@v6

Dockerfile

@@ -11,7 +11,7 @@ RUN pnpm install --frozen-lockfile
 COPY . .
 RUN pnpm build
 
-FROM gcr.io/distroless/nodejs22-debian12
+FROM gcr.io/distroless/nodejs24-debian12
 
 # ENV NODE_ENV=production
 WORKDIR /usr/src

app/layout.tsx

@@ -1,6 +1,7 @@
 import type { Metadata } from "next";
 import { Geist, Geist_Mono, Noto_Sans_JP } from "next/font/google";
 import "./globals.css";
+import Script from "next/script";
 
 const geistSans = Geist({
     variable: "--font-geist-sans",
@@ -33,6 +34,8 @@ export default function RootLayout({
                 className={`${geistSans.variable} ${geistMono.variable} ${notoSansJP.variable} antialiased`}
             >
                 {children}
+                <Script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-8715826596324259"
+     crossOrigin="anonymous"></Script>
             </body>
         </html>
     );

blogs/20251123.mdx

@@ -0,0 +1,67 @@
+export const metadata = {
+    title: "TLS証明書をGoogle Trust Serviceに変えてみた",
+    description: "TLS証明書をLet's EncryptからGoogle Trust Serviceに変えてみた話",
+    datetime: "2025/11/23",
+};
+
+## 事前説明
+私はサイトをKubernetes上で動かしており、cert-managerを使ってLet's EncryptのSSL証明書を発行していました。
+
+## アカウントの発行
+```
+gcloud init
+```
+でまず環境を初期化
+
+そののち
+```
+gcloud services enable publicca.googleapis.com
+```
+でGoogle Trust Serviceを有効化
+
+次にアカウントの発行
+```
+gcloud publicca external-account-keys create
+```
+
+そうすると以下のように返される。
+```
+Created an external account key
+[b64MacKey: <eab-secret>
+keyId: <key-id>]
+```
+次の`cert-managerの例`で使うからメモしておく。
+
+keyをsecretに登録
+```sh
+kubectl create secret generic eab-secret \
+    --from-literal secret=<eab-secret> \
+    -n cert-manager
+```
+
+## cert-managerの例
+```yaml
+# issuer-lets-encrypt-staging.yaml
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+  name: gts-prod
+spec:
+  acme:
+    server: https://dv.acme-v02.api.pki.goog/directory
+    email: <mail address>
+    externalAccountBinding:
+      keyID: <key-id>
+      keySecretRef:
+        name: eab-secret
+        key: secret
+    privateKeySecretRef:
+      name: example-issuer-account-key
+    solvers:
+    - http01:
+        ingress:
+          ingressClassName: nginx
+```
+
+## 最後に
+このサイトもGoogle Trust Service使っています。

blogs/20260101.mdx

@@ -0,0 +1,11 @@
+export const metadata = {
+    title: "あけましておめでとうございます。",
+    description: "謹賀新年あけましておめでとうございます。今年もよろしくお願いします。",
+    datetime: "2026/01/01",
+};
+
+謹賀新年あけましておめでとうございます。今年もよろしくお願いします。
+
+今年はneodylandのインフラの規模を拡大目指します。さらにクラウドの開発をやってみたいです。
+
+他にも色々と挑戦して、色々学んでいきます！

blogs/vyos-tmp.mdx

@@ -0,0 +1,73 @@
+export const metadata = {
+    title: "仮置き場",
+    description: "仮置き場",
+    datetime: "2025/11/06",
+};
+
+```sh
+# 1. プライベートIPアドレスのフィルター
+set policy prefix-list6 BGP-IN rule 10 action 'permit'
+set policy prefix-list6 BGP-IN rule 10 prefix '3ffe::/16'
+set policy prefix-list6 BGP-IN rule 10 le 128
+set policy prefix-list6 BGP-IN rule 20 action 'permit'
+set policy prefix-list6 BGP-IN rule 20 prefix '2001:db8::/32'
+set policy prefix-list6 BGP-IN rule 20 le 128
+set policy prefix-list6 BGP-IN rule 30 action 'permit'
+set policy prefix-list6 BGP-IN rule 30 prefix 'fe00::/8'
+set policy prefix-list6 BGP-IN rule 30 le 128
+set policy prefix-list6 BGP-IN rule 40 action 'permit'
+set policy prefix-list6 BGP-IN rule 40 prefix '::/0'
+set policy prefix-list6 BGP-IN rule 40 le 15
+set policy prefix-list6 BGP-IN rule 50 action 'permit'
+set policy prefix-list6 BGP-IN rule 50 prefix '::/128'
+set policy prefix-list6 BGP-IN rule 50 ge 128
+
+## 2. 1.のフィルターを通して、問題なかったものを許可する場所
+set policy route-map BGP-IN rule 10 action 'deny'
+set policy route-map BGP-IN rule 10 match ipv6 address prefix-list 'BGP-IN'
+set policy route-map BGP-IN rule 20 action 'permit'
+
+## 3. 広報するIP
+## `annouce-ip`: 広報する予定のIP
+set protocols static route6 <annouce-ip> blackhole distance '254'
+
+## 4. BGP接続設定(upstream用)
+## `my-asn`: 自分のASN
+## `neighbor-asn`: 相手のASN
+## `neighbor-ip`: 相手の境界IP
+## `my-border-ip`: 自分の境界IP
+## `annouce-ip`: 広報する予定のIP
+## `router-id`: ルーターID
+set protocols bgp system-as <my-asn>
+set protocols bgp neighbor <neighbor-ip> remote-as <neighbor-asn>
+set protocols bgp neighbor <neighbor-ip> update-source <my-border-ip>
+set protocols bgp neighbor <neighbor-ip> address-family ipv6-unicast route-map import 'BGP-IN'
+set protocols bgp neighbor <neighbor-ip> address-family ipv6-unicast
+set protocols bgp address-family ipv6-unicast network <annouce-ip>
+set protocols bgp parameters router-id <router-id>
+
+## 5. BGP接続設定(ほかの自分のBGPルーター)
+## 冗長化をする場合、この設定をいれるといいでしょう。
+## `my-asn`: 自分のASN
+## `neighbor-ip`: 他ルーターIP
+## `my-border-ip`: 自分のルーターIP
+set protocols bgp neighbor <neighbor-ip> remote-as <my-asn>
+set protocols bgp neighbor <neighbor-ip> update-source <my-border-ip>
+set protocols bgp neighbor <neighbor-ip> address-family ipv6-unicast
+
+## 6. IPの設定
+## `router-ip`: ルーターIP(prefixは/128)
+set interfaces lo lo address <router-ip>
+
+## 7. OSPFの設定
+## 予期せぬ事態にEthernetがダウンしたときに備えて、
+## 5.のiBGPの`my-border-ip`は6.で設定したアドレスを使いましょう。
+## `interface`: ほかのルーターに接続されているL2SW
+## `rid`: 4.で設定した`router-id`を設定してあげてください
+set protocols ospfv3 interface <interface> area 0.0.0.0
+set protocols ospfv3 interface lo area 0.0.0.0
+set protocols ospfv3 interface lo passive
+set protocols ospfv3 parameters router-id <rid>
+set protocols ospfv3 redistribute static
+set protocols ospfv3 default-information originate
+```

components/pages/home/header.tsx

@@ -23,7 +23,6 @@ const Header: React.FC = async () => {
         },
     );
     const data = await res.json();
-    console.log(data);
     const avatarURL = `https://cdn.discordapp.com/avatars/739702692393517076/${data.avatar}.png?size=1024`;
     return (
         <header className="flex h-screen w-screen items-center justify-center">

package.json

@@ -15,7 +15,7 @@
     "@next/mdx": "^16.0.0",
     "@types/mdx": "^2.0.13",
     "iconoir-react": "^7.11.0",
-    "next": "16.0.1",
+    "next": "16.2.1",
     "react": "^19.0.0",
     "react-dom": "^19.0.0"
   },

tsconfig.json

@@ -1,7 +1,11 @@
 {
   "compilerOptions": {
     "target": "ES2017",
-    "lib": ["dom", "dom.iterable", "esnext"],
+    "lib": [
+      "dom",
+      "dom.iterable",
+      "esnext"
+    ],
     "allowJs": true,
     "skipLibCheck": true,
     "strict": true,
@@ -11,7 +15,7 @@
     "moduleResolution": "bundler",
     "resolveJsonModule": true,
     "isolatedModules": true,
-    "jsx": "preserve",
+    "jsx": "react-jsx",
     "incremental": true,
     "plugins": [
       {
@@ -19,9 +23,20 @@
       }
     ],
     "paths": {
-      "@/*": ["./*"]
+      "@/*": [
+        "./*"
+      ]
     }
   },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts", "blogs/hello.mdx"],
-  "exclude": ["node_modules"]
+  "include": [
+    "next-env.d.ts",
+    "**/*.ts",
+    "**/*.tsx",
+    ".next/types/**/*.ts",
+    "blogs/*.mdx",
+    ".next/dev/types/**/*.ts"
+  ],
+  "exclude": [
+    "node_modules"
+  ]
 }