update to allow security on hugo to build in config in another dir

config/_default/hugo.toml

@@ -52,3 +52,6 @@ enableGitInfo = true
   [[module.mounts]]
     source = "/srv/configs"
     target = "configs"
+[security]
+  [security.funcs]
+    readFile = ["^/srv/configs/.*", "^/srv/docs/private/.*"]

layouts/partials/include.html

@@ -5,39 +5,48 @@
 {{- $path := .path -}}
 {{- $context := .context -}}
 
-{{/* Map absolute paths to relative mount points */}}
 {{- $originalPath := $path -}}
-{{- $path = replace $path "/srv/docs/private/" "content/private/" -}}
-{{- $path = replace $path "/srv/configs/" "configs/" -}}
-{{- $path = strings.TrimLeft "/" $path -}}
-
-{{- $isMarkdown := strings.HasSuffix (lower $path) ".md" -}}
-{{- $p := "" -}}
-{{- $content := "" -}}
 {{- $found := false -}}
+{{- $content := "" -}}
+{{- $isMarkdown := strings.HasSuffix (lower $path) ".md" -}}
 
-{{/* 1. Try to find a Hugo Page if it's Markdown */}}
+{{/* 1. Try absolute path directly (enabled by security settings in hugo.toml) */}}
-{{- if $isMarkdown -}}
+{{- if fileExists $path -}}
-  {{- $variations := slice $path (replace $path "content/" "") (replace $path "private/" "") -}}
+  {{- $content = readFile $path -}}
+  {{- $found = true -}}
+{{- end -}}
+
+{{/* 2. Map absolute paths to relative mount points if not found directly */}}
+{{- if not $found -}}
+  {{- $mappedPath := replace $path "/srv/docs/private/" "content/private/" -}}
+  {{- $mappedPath = replace $mappedPath "/srv/configs/" "configs/" -}}
+  {{- $mappedPath = strings.TrimLeft "/" $mappedPath -}}
+
+  {{- $p := "" -}}
+  
+  {{/* Try to find a Hugo Page if it's Markdown */}}
+  {{- if $isMarkdown -}}
+    {{- $variations := slice $mappedPath (replace $mappedPath "content/" "") (replace $mappedPath "private/" "") -}}
     {{- range $v := $variations -}}
       {{- if not $p }}{{ $p = $context.Site.GetPage $v }}{{ end -}}
       {{- if not $p }}{{ $p = $context.Site.GetPage (printf "/%s" $v) }}{{ end -}}
       {{- if not $p }}{{ $p = $context.Site.GetPage (strings.TrimSuffix ".md" $v) }}{{ end -}}
     {{- end -}}
-{{- end -}}
+  {{- end -}}
 
-{{- if $p -}}
+  {{- if $p -}}
     {{- $content = $p.Content -}}
     {{- $found = true -}}
-{{- else -}}
+  {{- else -}}
-  {{/* 2. Fallback to readFile - check multiple path variations */}}
+    {{/* Fallback to readFile - check multiple path variations */}}
-  {{- $pathsToTry := slice $path (printf "content/%s" $path) (printf "configs/%s" $path) -}}
+    {{- $pathsToTry := slice $mappedPath (printf "content/%s" $mappedPath) (printf "configs/%s" $mappedPath) -}}
     {{- range $v := $pathsToTry -}}
       {{- if and (not $found) (fileExists $v) -}}
         {{- $content = readFile $v -}}
         {{- $found = true -}}
       {{- end -}}
     {{- end -}}
+  {{- end -}}
 {{- end -}}
 
 {{- if $found -}}