数字化透明度：基于 Python 3.14 的 Halo 博客 Umami 实时统计动态注入实战

import requests
import re
import time
import logging
from typing import List, Optional

# ================= 配置区域 (已进行脱敏处理) =================
# 1. Halo 环境设置
HALO_BASE_URL = "http://127.0.0.1:8080"  # 本地 Docker 映射地址
HALO_DOMAIN = "blog.oool.cc"           # 你的外部访问域名
HALO_PAT = "your_pat_token_here"       # 替换为你的最新 PAT

# 2. Umami 统计设置
UMAMI_SHARE_URL = "https://your-umami.com/share/your-share-id"
UMAMI_SITE_ID = "your-website-id"

# 3. 注入配置
ANCHOR_TAG = "" # 文章中的占位锚点
# ===========================================================

# 日志配置
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')

class UmamiInjector:
    def __init__(self):
        self.headers = {
            "Authorization": f"Bearer {HALO_PAT}",
            "Content-Type": "application/json",
            "Accept": "application/json",
            "Host": HALO_DOMAIN
        }

    def generate_iframe(self):
        """生成符合 SEO 准则的 Umami Iframe 代码"""
        # 增加 loading="lazy" 以优化 Google LCP 指标
        return (
            f'\n<div class="umami-stats-container" style="margin-top: 2rem;">'
            f'<iframe src="{UMAMI_SHARE_URL}?website={UMAMI_SITE_ID}&theme=light&show_menu=false" '
            f'frameborder="0" width="100%" height="400" '
            f'loading="lazy" style="border-radius: 8px; border: 1px solid #eee;">'
            f'</iframe>'
            f'</div>\n'
        )

    def get_all_posts(self) -> List[dict]:
        """拉取所有已发布文章"""
        url = f"{HALO_BASE_URL}/apis/api.console.halo.run/v1alpha1/posts?page=1&size=100"
        try:
            resp = requests.get(url, headers=self.headers, timeout=15)
            resp.raise_for_status()
            return resp.json().get("items", [])
        except Exception as e:
            logging.error(f"无法拉取文章列表: {e}")
            return []

    def inject_stats(self, post_item: dict):
        """核心注入逻辑"""
        post_data = post_item.get("post", {})
        metadata = post_data.get("metadata", {})
        spec = post_data.get("spec", {})
        
        post_name = metadata.get("name")
        title = spec.get("title")
        content_raw = spec.get("content", {}).get("raw", "")

        # 逻辑判断：如果包含锚点 且 尚未注入过 iframe
        if ANCHOR_TAG in content_raw and "umami-stats-container" not in content_raw:
            logging.info(f"正在为文章《{title}》注入统计图表...")
            
            iframe_code = self.generate_iframe()
            # 在锚点下方注入
            new_content = content_raw.replace(ANCHOR_TAG, f"{ANCHOR_TAG}\n{iframe_code}")
            
            # 准备 PATCH 请求
            patch_url = f"{HALO_BASE_URL}/apis/api.console.halo.run/v1alpha1/posts/{post_name}"
            payload = {
                "spec": {
                    "content": {
                        "raw": new_content,
                        "medium": "markdown"
                    }
                }
            }
            
            try:
                # 针对 Halo 2.x 的 PATCH 必须遵循 merge-patch+json 规范
                patch_headers = self.headers.copy()
                patch_headers["Content-Type"] = "application/merge-patch+json"
                
                resp = requests.patch(patch_url, headers=patch_headers, json=payload, timeout=10)
                if resp.status_code == 200:
                    logging.info(f"✅ 成功注入: {title}")
                else:
                    logging.error(f"❌ 注入失败: {resp.status_code} - {resp.text}")
            except Exception as e:
                logging.error(f"请求异常: {e}")

    def run(self):
        logging.info("🚀 Umami 动态注入插件启动...")
        posts = self.get_all_posts()
        for item in posts:
            self.inject_stats(item)
            time.sleep(0.5) # 避开 API 限流

if __name__ == "__main__":
    UmamiInjector().run()

# 允许特定域名嵌套 iframe
add_header Content-Security-Policy "frame-ancestors 'self' blog.oool.cc";
proxy_hide_header X-Frame-Options;