Une façon créative de bloquer les indésirables

config/_default/config.yaml

@@ -7,6 +7,12 @@ disableHugoGeneratorInject: true
 enableEmoji: true
 timeZone: Europe/Paris
 theme: ["2026"]
+security:
+  funcs:
+    getenv:
+      - "^HUGO_"
+      - "^CI$"
+      - "^MEILI_SEARCH_API_KEY$"
 params:
   lists:
     layout: spotlight

config/_default/params.yaml

@@ -2,12 +2,12 @@ favicon: /favicon.png
 # Pas de / pour les ressources qui seront transformées
 # Et les placer dans /assets et non dans /static
 logo: logo-large.png
-description: "et ses opinions impopulaires"
+description: "Richard Dern et ses opinions impopulaires"
+themeColor: "#060c14"
 search:
   action: /recherche/
   param: q
   meilisearch:
     endpoint: /api/search
     indexUid: blog_posts
-    apiKey: "cf49bcdb1b08e5c502c41956d38ce0be80d5e79e9f084e6f15f4485f87d63c30"
     hitsPerPage: 20

content/interets/informatique/2026/03/08/une-facon-creative-de-bloquer-les-indesirables/data/images/aliases.yaml

@@ -0,0 +1,4 @@
+#title: ""
+#attribution: ""
+description: "L'alias `comportement_suspect` se remplit tout seul désormais."
+#prompt: ""

content/interets/informatique/2026/03/08/une-facon-creative-de-bloquer-les-indesirables/data/images/architecture-reseau.yaml

@@ -0,0 +1,4 @@
+#title: ""
+#attribution: ""
+description: "Vue simplifiée de mon architecture réseau."
+#prompt: ""

content/interets/informatique/2026/03/08/une-facon-creative-de-bloquer-les-indesirables/data/images/cover.yaml

@@ -0,0 +1,4 @@
+#title: ""
+attribution: "ChatGPT Auto"
+description: "Collaboration entre Caddy et OPNsense pour filtrer les comportements suspects sur mon site."
+prompt: "Dynamic digital illustration showing collaboration between a Caddy web server and an OPNsense firewall to block suspicious IP addresses while remaining bot-friendly. Split cyber-security themed scene: on the left a modern server rack with the Caddy logo and a glowing blue protective shield, friendly small robot bots representing legitimate crawlers; on the right an OPNsense firewall server emitting an orange security shield. In the center a digital warning panel reading ‘Access Denied – Suspicious IP’ with network traffic being filtered. Dark cyber-security environment with world map, network lines, glowing circuits, blue vs orange lighting contrast, cinematic lighting, high-detail, wide banner illustration suitable as a blog header."

content/interets/informatique/2026/03/08/une-facon-creative-de-bloquer-les-indesirables/data/images/shaming.yaml

@@ -0,0 +1,4 @@
+#title: ""
+#attribution: ""
+description: "Ce petit malotru vérifie si je fais tourner WordPress. Pour la dernière fois."
+#prompt: ""

content/interets/informatique/2026/03/08/une-facon-creative-de-bloquer-les-indesirables/diagrams/architecture-reseau.mermaid

@@ -0,0 +1,15 @@
+flowchart LR
+  internet[Internet]
+  freebox[Freebox<br/>mode bridge]
+  opnsense[Routeur<br/>OPNsense + Caddy]
+
+  internet --> freebox --> opnsense
+
+  subgraph lan[Réseau local]
+    direction TB
+    server[server-main<br/>NixOS + Caddy<br/>Héberge mon blog]
+    others[Autres machines physiques<br/>Autres services web]
+  end
+
+  opnsense -->|Reverse-proxy| server
+  opnsense -->|Reverse-proxy| others

layouts/partials/head/description.html

@@ -0,0 +1,18 @@
+{{- $description := .Description | default "" -}}
+{{- if not $description -}}
+  {{- $description = .Summary | plainify | htmlUnescape -}}
+{{- end -}}
+{{- if not $description -}}
+  {{- $description = .Plain | htmlUnescape -}}
+{{- end -}}
+{{- if not $description -}}
+  {{- $description = .Content | plainify | htmlUnescape -}}
+{{- end -}}
+{{- if not $description -}}
+  {{- $description = site.Params.description | default "" -}}
+{{- end -}}
+{{- $description = $description | replaceRE "\\s+" " " | strings.TrimSpace -}}
+{{- if gt (len $description) 180 -}}
+  {{- $description = truncate 180 $description -}}
+{{- end -}}
+{{- return $description -}}

layouts/partials/head/metadata.html

@@ -0,0 +1,68 @@
+{{- $title := site.Title -}}
+{{- if not .IsHome -}}
+  {{- $title = printf "%s | %s" .Title site.Title -}}
+{{- end -}}
+{{- $socialTitle := site.Title -}}
+{{- if not .IsHome -}}
+  {{- $socialTitle = .Title -}}
+{{- end -}}
+{{- $description := partial "head/description.html" . -}}
+{{- $socialImage := partial "head/social-image.html" . -}}
+{{- $searchPath := site.Params.search.action | relURL -}}
+{{- $isSearchPage := eq .RelPermalink $searchPath -}}
+{{- $robots := "max-image-preview:large" -}}
+{{- if $isSearchPage -}}
+  {{- $robots = "noindex, follow" -}}
+{{- end -}}
+{{- $ogType := "website" -}}
+{{- if and .IsPage (not $isSearchPage) -}}
+  {{- $ogType = "article" -}}
+{{- end -}}
+{{- $localeCode := site.LanguageCode | default site.Language.LanguageCode | default "fr-FR" -}}
+{{- $locale := replace $localeCode "-" "_" -}}
+<title>{{ $title }}</title>
+{{- with $description }}
+<meta name="description" content="{{ . }}">
+{{- end }}
+<meta name="theme-color" content="{{ site.Params.themeColor | default "#060c14" }}">
+<meta name="robots" content="{{ $robots }}">
+<link rel="canonical" href="{{ .Permalink }}">
+<meta property="og:locale" content="{{ $locale }}">
+<meta property="og:site_name" content="{{ site.Title }}">
+<meta property="og:type" content="{{ $ogType }}">
+<meta property="og:title" content="{{ $socialTitle }}">
+<meta property="og:url" content="{{ .Permalink }}">
+{{- with $description }}
+<meta property="og:description" content="{{ . }}">
+{{- end }}
+{{- with $socialImage.url }}
+<meta property="og:image" content="{{ . }}">
+{{- end }}
+{{- with $socialImage.width }}
+<meta property="og:image:width" content="{{ . }}">
+{{- end }}
+{{- with $socialImage.height }}
+<meta property="og:image:height" content="{{ . }}">
+{{- end }}
+{{- with $socialImage.alt }}
+<meta property="og:image:alt" content="{{ . }}">
+{{- end }}
+<meta name="twitter:card" content="summary">
+<meta name="twitter:title" content="{{ $socialTitle }}">
+{{- with $description }}
+<meta name="twitter:description" content="{{ . }}">
+{{- end }}
+{{- with $socialImage.url }}
+<meta name="twitter:image" content="{{ . }}">
+{{- end }}
+{{- with $socialImage.alt }}
+<meta name="twitter:image:alt" content="{{ . }}">
+{{- end }}
+{{- if eq $ogType "article" -}}
+  {{- with .Date }}
+<meta property="article:published_time" content="{{ .Format "2006-01-02T15:04:05Z07:00" }}">
+  {{- end }}
+  {{- with .Lastmod }}
+<meta property="article:modified_time" content="{{ .Format "2006-01-02T15:04:05Z07:00" }}">
+  {{- end }}
+{{- end -}}

layouts/partials/head/social-image.html

@@ -0,0 +1,55 @@
+{{- $image := false -}}
+{{- $isCoverImage := false -}}
+{{- $alt := "" -}}
+{{- with .Params.cover -}}
+  {{- $cover := $.Resources.GetMatch . -}}
+  {{- if and $cover (ne $cover.MediaType.SubType "svg") -}}
+    {{- $image = $cover -}}
+    {{- $isCoverImage = true -}}
+    {{- $coverName := path.Base . | replaceRE "\\.[^.]+$" "" -}}
+    {{- $coverDataFile := $.Resources.Get (printf "data/images/%s.yaml" $coverName) -}}
+    {{- if not $coverDataFile -}}
+      {{- $coverDataFile = $.Resources.Get (printf "data/%s.yaml" $coverName) -}}
+    {{- end -}}
+    {{- $coverData := dict -}}
+    {{- if $coverDataFile -}}
+      {{- $coverData = $coverDataFile.Content | transform.Unmarshal -}}
+    {{- end -}}
+    {{- $alt = index $coverData "description" | default "" -}}
+    {{- if not $alt -}}
+      {{- $alt = index $coverData "title" | default "" -}}
+    {{- end -}}
+  {{- end -}}
+{{- end -}}
+{{- if not $image -}}
+  {{- $logoPath := site.Params.logo | default "logo-large.png" -}}
+  {{- $logo := resources.GetMatch $logoPath -}}
+  {{- if and $logo (ne $logo.MediaType.SubType "svg") -}}
+    {{- $image = $logo -}}
+  {{- end -}}
+{{- end -}}
+{{- if not $alt -}}
+  {{- if and $image $isCoverImage -}}
+    {{- if and .IsPage (not .IsHome) -}}
+      {{- $alt = printf "Image de partage pour %s" .Title -}}
+    {{- else -}}
+      {{- $alt = printf "Logo du site %s" site.Title -}}
+    {{- end -}}
+  {{- else if $image -}}
+    {{- $alt = printf "Logo du site %s" site.Title -}}
+  {{- end -}}
+{{- end -}}
+{{- $data := dict -}}
+{{- if $image -}}
+  {{- $data = dict
+    "url" $image.Permalink
+    "alt" ($alt | strings.TrimSpace | truncate 420)
+  -}}
+  {{- with $image.Width -}}
+    {{- $data = merge $data (dict "width" .) -}}
+  {{- end -}}
+  {{- with $image.Height -}}
+    {{- $data = merge $data (dict "height" .) -}}
+  {{- end -}}
+{{- end -}}
+{{- return $data -}}

layouts/recherche/single.html

@@ -1,6 +1,10 @@
 {{ define "main" }}
 {{- $search := .Site.Params.search -}}
 {{- $meili := $search.meilisearch -}}
+{{- $apiKey := getenv "MEILI_SEARCH_API_KEY" -}}
+{{- if eq $apiKey "" -}}
+  {{- errorf "MEILI_SEARCH_API_KEY is required to render the search page" -}}
+{{- end -}}
 <header class="article-header">
   {{ partialCached "header-brand.html" .Site .Site.Title (.Site.Params.logo | default "logo-large.png") }}
   <h1>{{ .Title }}</h1>
@@ -9,7 +13,7 @@
   class="search-page"
   data-search-endpoint="{{ $meili.endpoint }}"
   data-search-index="{{ $meili.indexUid }}"
-  data-search-api-key="{{ $meili.apiKey }}"
+  data-search-api-key="{{ $apiKey }}"
   data-search-limit="{{ $meili.hitsPerPage }}"
   data-search-param="{{ $search.param }}"
 >

test.sh

@@ -18,4 +18,8 @@ detect_dev_host() {
 DEV_HOST="$(detect_dev_host)"
 DEV_PORT=1313
 
-hugo server -DEF --bind "$DEV_HOST" --port $DEV_PORT --baseURL "http://$DEV_HOST:$DEV_PORT"
+if [ -z "${MEILI_SEARCH_API_KEY+x}" ]; then
+  export MEILI_SEARCH_API_KEY="dummy"
+fi
+
+hugo server -DEF --bind "$DEV_HOST" --port $DEV_PORT --baseURL "http://$DEV_HOST:$DEV_PORT"

themes/2026/layouts/_partials/article-header.html

@@ -76,7 +76,11 @@
       {{- if gt $coverDisplay.Width 1480 -}}
         {{- $coverWidth = 1480 -}}
       {{- end -}}
-      {{- $coverDisplay = $coverImage.Resize (printf "%dx webp q80" $coverWidth) -}}
+      {{- $coverDisplay = partial "media/process-image.html" (dict
+        "image" $coverImage
+        "action" "Resize"
+        "spec" (printf "%dx" $coverWidth)
+      ) -}}
     {{- end -}}
   {{- end -}}
 {{- end -}}

themes/2026/layouts/_partials/asides/complementary-images.html

@@ -100,7 +100,11 @@
         {{- $title := default (printf "Image complémentaire : %s" $imageName) (index $data "title") -}}
         {{- $thumbnail := . -}}
         {{- if and (ne .MediaType.SubType "svg") (gt .Width 360) -}}
-          {{- $thumbnail = .Resize "360x webp q80" -}}
+          {{- $thumbnail = partial "media/process-image.html" (dict
+            "image" .
+            "action" "Resize"
+            "spec" "360x"
+          ) -}}
         {{- end -}}
       <li>
         <a href="{{ .RelPermalink }}" title="{{ $title }}">

themes/2026/layouts/_partials/card.html

@@ -41,8 +41,6 @@
   {{- $thumbnailTransform = "900x506" -}}
 {{- end -}}
 
-{{- $thumbnailOptions := printf "%s webp q80" $thumbnailTransform -}}
-
 {{- $coverPath := $page.Params.cover -}}
 {{- $image := false -}}
 {{- if $coverPath -}}
@@ -111,7 +109,11 @@
     <a href="{{ $page.RelPermalink }}">
       <figure>
         {{- with $image -}}
-        {{- $resized := .Fill $thumbnailOptions -}}
+        {{- $resized := partial "media/process-image.html" (dict
+          "image" .
+          "action" "Fill"
+          "spec" $thumbnailTransform
+        ) -}}
         <img src="{{ $resized.RelPermalink }}" alt="Image de couverture pour {{ $page.Title }}" loading="lazy">
         {{- end -}}
       </figure>
@@ -127,7 +129,11 @@
   <a href="{{ $page.RelPermalink }}">
     <figure>
       {{- with $image -}}
-      {{- $resized := .Fill $thumbnailOptions -}}
+      {{- $resized := partial "media/process-image.html" (dict
+        "image" .
+        "action" "Fill"
+        "spec" $thumbnailTransform
+      ) -}}
       <img src="{{ $resized.RelPermalink }}" alt="Image de couverture pour {{ $page.Title }}" loading="lazy">
       {{- end -}}
     </figure>

themes/2026/layouts/_partials/head.html

@@ -1,13 +1,6 @@
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<title>{{ if .IsHome }}{{ site.Title }}{{ else }}{{ printf "%s | %s" .Title site.Title }}{{ end }}</title>
-{{ with .Description }}
-<meta name="description" content="{{ . }}">
-{{ else }}
-{{ with site.Params.description }}
-<meta name="description" content="{{ . }}">
-{{ end }}
-{{ end }}
+{{ partial "head/metadata.html" . }}
 <link rel="icon" href="{{ "favicon.ico" | absURL }}" type="image/x-icon">
 <link rel="shortcut icon" href="{{ "favicon.ico" | absURL }}" type="image/x-icon">
 <link rel="icon" href="{{ "favicon.png" | absURL }}" type="image/png" sizes="256x256">

themes/2026/layouts/_partials/media/display-img.html

@@ -15,13 +15,21 @@
     {{- if gt $image.Width $maxWidth -}}
       {{- $targetWidth = $maxWidth -}}
     {{- end -}}
-    {{- $display = $image.Resize (printf "%dx webp q80" $targetWidth) -}}
+    {{- $display = partial "media/process-image.html" (dict
+      "image" $image
+      "action" "Resize"
+      "spec" (printf "%dx" $targetWidth)
+    ) -}}
   {{- else -}}
     {{- $targetHeight := $image.Height -}}
     {{- if gt $image.Height 900 -}}
       {{- $targetHeight = 900 -}}
     {{- end -}}
-    {{- $display = $image.Resize (printf "x%d webp q80" $targetHeight) -}}
+    {{- $display = partial "media/process-image.html" (dict
+      "image" $image
+      "action" "Resize"
+      "spec" (printf "x%d" $targetHeight)
+    ) -}}
   {{- end -}}
 {{- end -}}
 

themes/2026/layouts/_partials/media/process-image.html

@@ -0,0 +1,30 @@
+{{/* Préserve les GIF animés en évitant toute transformation Hugo. */}}
+{{- $image := .image -}}
+{{- if not $image -}}
+  {{- errorf "media/process-image.html: missing image resource" -}}
+{{- end -}}
+
+{{- $action := .action -}}
+{{- if not $action -}}
+  {{- errorf "media/process-image.html: missing image action for %q" $image.Name -}}
+{{- end -}}
+
+{{- $spec := .spec -}}
+{{- if not $spec -}}
+  {{- errorf "media/process-image.html: missing image spec for %q" $image.Name -}}
+{{- end -}}
+
+{{- $result := $image -}}
+{{- $subType := lower $image.MediaType.SubType -}}
+{{- if and (ne $subType "svg") (ne $subType "gif") -}}
+  {{- $options := printf "%s webp q80" $spec -}}
+  {{- if eq $action "Fill" -}}
+    {{- $result = $image.Fill $options -}}
+  {{- else if eq $action "Resize" -}}
+    {{- $result = $image.Resize $options -}}
+  {{- else -}}
+    {{- errorf "media/process-image.html: unsupported image action %q for %q" $action $image.Name -}}
+  {{- end -}}
+{{- end -}}
+
+{{- return $result -}}

themes/2026/layouts/_partials/oeuvres/l-anankeisme.html

@@ -4,7 +4,11 @@
       {{- $assetPath := "images/oeuvres/l-anankeisme.png" -}}
       {{- $source := resources.Get $assetPath -}}
       {{- if $source -}}
-      {{- $img := $source.Resize "320x webp q80" -}}
+      {{- $img := partial "media/process-image.html" (dict
+        "image" $source
+        "action" "Resize"
+        "spec" "320x"
+      ) -}}
       <img src="{{ $img.RelPermalink }}" width="{{ $img.Width }}" height="{{ $img.Height }}" alt="Couverture de L'Anankéisme" loading="lazy">
       {{- end -}}
     </figure>

themes/2026/layouts/_partials/oeuvres/l-humain-cette-espece-primitive.html

@@ -4,7 +4,11 @@
       {{- $assetPath := "images/oeuvres/l-humain-cette-espece-primitive.jpeg" -}}
       {{- $source := resources.Get $assetPath -}}
       {{- if $source -}}
-      {{- $img := $source.Resize "320x webp q80" -}}
+      {{- $img := partial "media/process-image.html" (dict
+        "image" $source
+        "action" "Resize"
+        "spec" "320x"
+      ) -}}
       <img src="{{ $img.RelPermalink }}" width="{{ $img.Width }}" height="{{ $img.Height }}" alt="Couverture de L'Humain, cette espèce primitive" loading="lazy">
       {{- end -}}
     </figure>

themes/2026/layouts/_partials/site-title.html

@@ -6,7 +6,11 @@
 {{- $logo := resources.GetMatch $logoPath -}}
 <a href="{{ "/" | relURL }}" aria-label="Revenir à l'accueil">
   {{- with $logo -}}
-  {{- $resized := .Resize "64x webp q80" -}}
+  {{- $resized := partial "media/process-image.html" (dict
+    "image" .
+    "action" "Resize"
+    "spec" "64x"
+  ) -}}
   <img src="{{ $resized.RelPermalink }}" alt="">
   {{- end -}}
   <strong>{{ $site.Title }}</strong>

themes/2026/layouts/_partials/timeline-list.html

@@ -36,7 +36,11 @@
         {{- with $image -}}
         <a href="{{ $page.RelPermalink }}">
           <figure>
-            {{- $resized := .Fill "600x340 webp q80" -}}
+            {{- $resized := partial "media/process-image.html" (dict
+              "image" .
+              "action" "Fill"
+              "spec" "600x340"
+            ) -}}
             <img src="{{ $resized.RelPermalink }}" alt="Image de couverture pour {{ $page.Title }}" loading="lazy">
           </figure>
         </a>

themes/2026/layouts/home.html

@@ -315,7 +315,11 @@
           <a href="{{ $page.RelPermalink }}">
               <figure>
               {{- with $image -}}
-              {{- $resized := .Fill "166x91 webp q80" -}}
+              {{- $resized := partial "media/process-image.html" (dict
+                "image" .
+                "action" "Fill"
+                "spec" "166x91"
+              ) -}}
               <img src="{{ $resized.RelPermalink }}" alt="Capture du lien {{ $page.Title }}" loading="lazy">
               {{- end -}}
             </figure>
@@ -401,7 +405,11 @@
             <a href="{{ $item.RelPermalink }}" title="{{ $item.Title }}">
               <figure>
                 {{- with $itemImage -}}
-                {{- $resized := .Resize "x128 webp q80" -}}
+                {{- $resized := partial "media/process-image.html" (dict
+                  "image" .
+                  "action" "Resize"
+                  "spec" "x128"
+                ) -}}
                 <img src="{{ $resized.RelPermalink }}" alt="{{ $item.Title }}" title="{{ $item.Title }}" loading="lazy">
                 {{- end -}}
               </figure>

themes/42/layouts/_partials/head.html

@@ -1,6 +1,6 @@
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width">
-<title>{{ if .IsHome }}{{ site.Title }}{{ else }}{{ printf "%s | %s" .Title site.Title }}{{ end }}</title>
+{{ partial "head/metadata.html" . }}
 <link rel="icon" href="{{ "favicon.ico" | absURL }}" type="image/x-icon" />
 <link rel="shortcut icon" href="{{ "favicon.ico" | absURL }}" type="image/x-icon" />
 <link rel="icon" href="{{ "favicon.png" | absURL }}" type="image/png" sizes="256x256" />