<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hugo on 5ok — sysadmin, devops, hosting</title><link>https://www.5ok.eu/tags/hugo/</link><description>Recent content in Hugo on 5ok — sysadmin, devops, hosting</description><generator>Hugo</generator><language>en</language><lastBuildDate>Fri, 14 Aug 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://www.5ok.eu/tags/hugo/index.xml" rel="self" type="application/rss+xml"/><item><title>Why we moved our own site off the CMS</title><link>https://www.5ok.eu/blog/why-we-moved-our-own-site-off-the-cms/</link><pubDate>Fri, 14 Aug 2026 00:00:00 +0000</pubDate><guid>https://www.5ok.eu/blog/why-we-moved-our-own-site-off-the-cms/</guid><description>&lt;p&gt;A friend&amp;rsquo;s site got compromised recently - not through anything clever, just an unpatched plugin. Cleaning it up took longer than building the site in the first place.&lt;/p&gt;
&lt;p&gt;That made us look at our own CMS install: a handful of plugins, a theme, a contact form. Exactly the surface automated scanners pick apart within hours of a CVE going public. Did a mostly-static site - About, Services, Contact - really need an application runtime, a database, and an admin login? No.&lt;/p&gt;</description></item></channel></rss>