#bastillebsd — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #bastillebsd, aggregated by home.social.
-
When your jails are on a private network how do you reach them from the outside? Redirect the port from the host:
bastille rdr TARGET tcp 443 443
bastille rdr TARGET tcp 2200 22List them with bastille rdr TARGET list, clear with ... clear.
VNET jails don't need and don't use this.
-
Manpage Monday: bastille pkg
Manage packages inside your jails without ever consoling in.
Install nginx in myjail
> bastille pkg myjail install nginxUse the host's pkg binary instead of the jail's
> bastille pkg -H myjail install nginxWorks with any pkg args: update, upgrade, search, audit, info, etc
-
Mini-guide: Deploying a simple nginx proxy jail with custom file overlay:
PKG nginx
CP usr /
SERVICE nginx enable
SERVICE nginx startPlace overlay files at template root:
- `usr/local/etc/nginx/…`
- `usr/local/www/domain.tld/html`
- `usr/local/etc/ssl/…
…Simple. Reproducible. Automated.
-
@ianthetechie We consolidated the docs & domains but some of the old links are still around. Try this one:
https://bastille.readthedocs.io/projects/rocinante/en/latest/
For additional context, cross-reference with the Bastille templates documentation which uses the same engine for template parsing.
https://bastille.readthedocs.io/en/latest/chapters/template.html
-
We're aware of an issue with the Rocinante documentation being inaccessible due to a domain expiring. We're moving some things around and will get it fixed soon.
-
Sometimes we try to juggle too much and the little things slip. Best we can do is reevaluate, reprioritize and retry.
Some regressions slipped into Rocinante recently and broke some template functions. These have been fixed now in GitHub.
Thank you for your patience. Even the best intentions sometimes have unexpected consequences.
These changes will make it into ports/pkg in the next update.
-
It's Tuesday so you know what that means.
Each week we're showcasing some of the many automated jail templates available in BastilleBSD.
This week we're building with:
Caddy - The ultimate server with automatic HTTPS
Caddy is a powerful, enterprise-ready, open source web server with automatic HTTPS written in Go.https://github.com/BastilleBSD/templates/blob/main/www/caddy/Bastillefile