Add anubis and deploy to fly (#3)

Reviewed-on: https://codeberg.org/bianchidotdev/bianchi.dev/pulls/3
Co-authored-by: Bianchi <m@bianchi.dev>
Co-committed-by: Bianchi <m@bianchi.dev>

Author: bianchidotdev

.dockerignore

@@ -0,0 +1,15 @@
+node_modules
+.astro
+.vscode
+*.log
+npm-debug.log*
+.env*
+.DS_Store
+Thumbs.db
+
+# Keep these files for the build
+!package*.json
+!astro.config.mjs
+!tsconfig.json
+!src/
+!public/

Caddyfile

@@ -0,0 +1,31 @@
+{
+	# disable HTTPS because it's going to be handled by fly.io
+	auto_https off
+	servers {
+		# sets fly proxy as trusted proxy
+		trusted_proxies static 172.16.0.0/16
+		client_ip_headers X-Forwarded-For Fly-Client-IP
+	}
+	log {
+		level INFO
+		exclude http.handlers.anubis.anubis
+	}
+}
+
+:8080 {
+	# required for anubis to work
+	request_header +X-Real-IP {client_ip}
+
+	handle /health {
+		respond "OK" 200
+	}
+
+	handle {
+		# Enable Anubis anti-AI/scraper protection
+		anubis
+
+		# static file server
+		root * /usr/share/caddy
+		file_server
+	}
+}

Dockerfile

@@ -0,0 +1,33 @@
+# Multi-stage build for Astro + Custom Caddy with Anubis
+
+# Build custom Caddy with Anubis plugin
+FROM caddy:2-builder AS caddy-builder
+
+RUN xcaddy build \
+    --with github.com/daegalus/caddy-anubis
+
+
+# Build the Astro site
+FROM node:24-alpine AS astro-builder
+
+WORKDIR /app
+
+COPY package*.json ./
+RUN npm ci
+
+COPY . .
+RUN npm run build
+
+
+# Runtime image
+FROM caddy:2-alpine
+
+# Copy the caddy modules
+COPY --from=caddy-builder /usr/bin/caddy /usr/bin/caddy
+
+# Copy the built site
+COPY --from=astro-builder /app/dist /usr/share/caddy
+COPY ./Caddyfile /etc/caddy/Caddyfile
+
+EXPOSE 8080
+CMD ["caddy", "run", "--config", "/etc/caddy/Caddyfile"]

fly.toml

@@ -0,0 +1,30 @@
+# fly.toml app configuration file generated for bianchi-dev on 2025-08-30T19:37:03-05:00
+#
+# See https://fly.io/docs/reference/configuration/ for information about how to use this file.
+#
+
+app = 'bianchi-dev'
+primary_region = 'lax'
+
+[build]
+  dockerfile = 'Dockerfile'
+
+[http_service]
+  internal_port = 8080
+  force_https = false
+  # let's just always run a tiny machine for now
+  # auto_stop_machines = 'stop'
+  # auto_start_machines = true
+  min_machines_running = 1
+  processes = ['app']
+
+  [[http_service.checks]]
+    interval = "30s"
+    timeout = "10s"
+    grace_period = "15s"
+    method = "GET"
+    path = "/health"
+    protocol = "http"
+
+[[vm]]
+  size = 'shared-cpu-1x'

mise.toml

@@ -1,3 +1,44 @@
+#:schema https://mise.jdx.dev/schema/mise.json
+
 [tools]
 flyctl = "latest"
 node = "24"
+
+# astro
+[tasks.build]
+run = "npm run build"
+
+[tasks.dev]
+run = "npm run dev"
+
+# caddy
+[tasks."caddy:build"]
+run = "docker build --target=caddy-builder -t caddy-builder ."
+[tasks."caddy:fmt"]
+depends = ["caddy:build"]
+run = [
+  "docker run -it --rm -v ./Caddyfile:/tmp/Caddyfile caddy-builder caddy fmt --overwrite --config /tmp/Caddyfile",
+]
+[tasks."caddy:lint"]
+depends = ["caddy:build"]
+run = [
+  "docker build --target=caddy-builder -t caddy-builder .",
+  "docker run -it --rm -v ./Caddyfile:/tmp/Caddyfile caddy-builder caddy validate --config /tmp/Caddyfile",
+]
+
+# docker
+[tasks."docker:build"]
+run = "docker build -t bonkydev ."
+
+[tasks."docker:dev"]
+run = [
+  "docker build -t bonkydev .",
+  "docker run -it --rm -p 8080:8080 bonkydev",
+]
+
+# working with fly
+[tasks.deploy]
+run = "fly deploy"
+
+[tasks.logs]
+run = "fly logs"