feat!: Split site into public and private sections

Moved the Copper Chronicle and resume into a private git submodule
(src/private), visible only to authenticated users. Added a lock symbol
to the mdbook sidebar for restricted sections. Reorganized nginx/nix
configuration files into a dedicated folder. Removed one-line descriptions
from the menu. Reduced custom CSS to better align the main website's theme
with mdbook's native styling. Personalized the index and blog introduction
pages.

.forgejo/workflows/cd.yml

@@ -8,7 +8,6 @@ on:
         required: true
         type: choice
         options:
-          - local
           - staging
           - prod
 
@@ -19,7 +18,9 @@ jobs:
       - name: Download artifact
         uses: actions/download-artifact@v3
         with:
-          name: site-${{ github.sha }}
-          path: blog/
+          name: blog-${{ github.sha }}
+          path: book/
       - name: Deploy
-        run: nix shell nixpkgs#rsync --command ./deploy.sh ${{ inputs.target }}
+        run: |
+          nix shell nixpkgs#rsync --command rsync -av --delete book/ /srv/www/binning.net/
+          printf "✓ Local deployment complete!\n"

.forgejo/workflows/ci.yml

@@ -8,11 +8,28 @@ jobs:
     runs-on: self-hosted
     steps:
       - uses: actions/checkout@v4
+        with:
+          submodules: false
       - name: Build
-        run: nix shell nixpkgs#mdbook --command ./deploy.sh build
+        run: |
+          git config --global url."https://oauth2:${{ secrets.WWW_PRIVATE_TOKEN }}@forgejo.binning.net/".insteadOf "https://forgejo.binning.net/"         
+          git submodule update --init --depth=1
+          nix shell nixpkgs#mdbook --command mdbook build
+          printf "✓ Build complete!\n"
       - name: Upload artifact
         uses: actions/upload-artifact@v3
         with:
-          name: site-${{ github.sha }}
-          path: blog/
-
+          name: blog-${{ github.sha }}
+          path: book/
+  deploy:
+    runs-on: self-hosted
+    steps:
+      - name: Download artifact
+        uses: actions/download-artifact@v3
+        with:
+          name: blog-${{ github.sha }}
+          path: book/
+      - name: Deploy
+        run: |
+          nix shell nixpkgs#rsync --command rsync -av --delete book/ /srv/www/binning.net/
+          printf "✓ Local deployment complete!\n"

.forgejo/workflows/nightly.yml

@@ -9,15 +9,19 @@ jobs:
     runs-on: self-hosted
     steps:
       - uses: actions/checkout@v4
+        with:
+          submodules: false
       - name: Build
-        run: nix shell nixpkgs#mdbook --command ./deploy.sh build
+        run: |
+          git config --global url."https://oauth2:${{ secrets.WWW_PRIVATE_TOKEN }}@forgejo.binning.net/".insteadOf "https://forgejo.binning.net/"         
+          git submodule update --init --depth=1
+          nix shell nixpkgs#mdbook --command mdbook build
+          printf "✓ Build complete!\n"
       - name: Upload artifact
         uses: actions/upload-artifact@v3
         with:
-          name: site-${{ github.sha }}
-          path: blog/
-
-
+          name: blog-${{ github.sha }}
+          path: book/
   deploy:
     needs: build
     runs-on: self-hosted
@@ -25,7 +29,12 @@ jobs:
       - name: Download artifact
         uses: actions/download-artifact@v3
         with:
-          name: site-${{ github.sha }}
-          path: blog/
+          submodules: true
+          token: ${{ secrets.WWW_PRIVATE_TOKEN }}
+        with:
+          name: blog-${{ github.sha }}
+          path: book/
       - name: Deploy
-        run: nix shell nixpkgs#rsync --command ./deploy.sh local
+        run: |
+          nix shell nixpkgs#rsync --command rsync -av --delete book/ /srv/www/binning.net/
+          printf "✓ Local deployment complete!\n"