I wanted a simple place to dump security notes and writeups without dealing with a server. This is what I ended up with.

Stack

• Hugo with the Lambda theme
• Azure Static Web Apps (free tier)
• GitHub Actions for the build and deploy
• Terraform for the Azure resources
• Cloudflare for DNS

No servers, no containers, nothing running 24/7.

How it works

The site lives in a GitHub repo. Every push to main triggers a workflow that:

1. Checks out the code
2. Builds the Hugo site
3. Deploys the public/ folder to the Static Web App

Terraform created the resource group and the Static Web App.

Domain and HTTPS

I pointed exploitthis.com at the Static Web App from Cloudflare with a CNAME.