Static site generator

Rust-based static site generator that converts Markdown to HTML and PDF. Includes CLI for content management and WASM-powered dark mode.

    flowchart LR;
    A[content in Markdown]-->B[static site generator];
    C[HTML templates]-->B;
    B-->D[index.html];
    B-->E[PDF files];

Loading

Usage

Build site

Generate HTML and PDF files from Markdown sources:

cargo run --release

Add blog entry

Create a new entry in in/entries/ and update in/junkyard.md:

cargo run --release -- add "Entry Title"

Entry filename format: N-entry-title.md where N is auto-incremented.

Add shadow entry (private)

Create a private entry that's not listed in junkyard.md:

cargo run --release -- add --shadow "Private Entry"

Shadow entries:

• Stored in in/entries/shadow/ (independent numbering)
• Output to priv/entries/N.html (separate from pub/)
• Accessible via /priv/entries/N.html URLs
• Not added to junkyard index
• Navigation links only to other shadow entries

Edit blog entry

Edit an existing entry by number or path:

# Edit public entry #5
cargo run --release -- edit 5
cargo run --release -- edit 5p

# Edit shadow entry #5
cargo run --release -- edit 5s

# Edit by full path
cargo run --release -- edit in/entries/5-title.md

Entry editing:

• Opens entry in $EDITOR (defaults to vim)
• Auto-decrypts locked entries (.enc) to temporary file
• Auto-re-encrypts after editing (preserves encryption)
• Temp files cleaned up automatically (RAII pattern)
• Single passphrase attempt (fail-fast security)

Encrypt blog entry

Password-protect an entry with AES-256-GCM encryption:

# Create and encrypt an entry
cargo run --release -- add "Private Research"
cargo run --release -- lock in/entries/7-private-research.md

# Encrypt shadow entry (double privacy: unlisted + encrypted)
cargo run --release -- add --shadow "Secret Notes"
cargo run --release -- lock in/entries/shadow/1-secret-notes.md

# Decrypt entry back to plaintext
cargo run --release -- lock --unlock in/entries/7-private-research.enc

Encryption details:

• Uses AES-256-GCM (authenticated encryption, tamper-proof)
• Argon2id key derivation (64MB memory, GPU-resistant)
• Source file: .md → .enc (encrypted on disk)
• Browser-side decryption via WASM (no server needed)
• Locked entries show blurred preview with unlock form
• Set passphrase: export ENKRONIO_LOCK_KEY="your-passphrase"

CLI reference

enkronio [COMMAND]

Commands:
  add [OPTIONS] <TITLE>    Add a new blog entry
  edit <TARGET>            Edit existing entry (5p/5s/5 or full path)
  lock [OPTIONS] <PATH>    Encrypt/decrypt entry with AES-256-GCM
  help                     Print help information

Options for add:
  --shadow                 Create as shadow entry (private, not listed)
  -h, --help              Print help

Options for lock:
  --unlock                 Decrypt .enc file back to .md
  -h, --help              Print help

Project structure

in/
├── entries/           Blog entries (numbered: 1-title.md, 2-title.md, ...)
│   └── shadow/       Private entries (not in junkyard)
├── cv.md             CV (→ root/cv.html + download/sbelokon.pdf)
├── index.md          Cover page (→ root/index.html + download/cover.pdf)
└── junkyard.md       Blog index page

pub/
├── entries/          Generated entry HTML (1.html, 2.html, ...)
└── junkyard.html     Blog index HTML

priv/
└── entries/          Generated shadow entry HTML (1.html, 2.html, ...)

download/             Generated PDFs

web/pkg/              WASM module for dark mode and decryption

404.html              Custom 404 page
pub/index.html        Directory index stub (redirects)

Development

Build and serve locally

make site

Builds WASM module, generates site, serves on http://localhost:8080.

Build WASM module

wasm-pack build --target web --out-dir web/pkg

Clean artifacts

make clean

Code quality

cargo check
cargo clippy

Git hooks

Install pre-push hook to validate code quality before pushing:

./hooks/install-hooks.sh

Pre-push hook runs automatically before git push and checks:

• Code formatting (cargo fmt)
• Linting (cargo clippy)
• Test suite (cargo test)

To bypass hook (not recommended):

git push --no-verify

CI/CD

Implemented using Gihub workflows feature. Build stages:

    flowchart LR;
    A[provision VM/container]-->B[install Rust toolchains];
    B-->C[checkout repository];
    C-->D[build static pages];
    C-->E[site availability test];
    D-->F[pack artifacts];
    F-->G[deploy artifacts];

Loading