#bastillebsd — Public Fediverse posts

When your jails are on a private network how do you reach them from the outside? Redirect the port from the host:

bastille rdr TARGET tcp 443 443
bastille rdr TARGET tcp 2200 22

List them with bastille rdr TARGET list, clear with ... clear.

VNET jails don't need and don't use this.

#TeachingTuesday #BastilleBSD #FreeBSD

Manpage Monday: bastille pkg

Manage packages inside your jails without ever consoling in.

Install nginx in myjail
> bastille pkg myjail install nginx

Use the host's pkg binary instead of the jail's
> bastille pkg -H myjail install nginx

Works with any pkg args: update, upgrade, search, audit, info, etc

#BastilleBSD #FreeBSD #ManpageMonday

https://github.com/cloudfence/wazuhvirtualagents

#BastilleBSD #FreeBSD #wazuh

New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy.

A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data.

The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries.

https://blog.hofstede.it/hosting-dokuwiki-on-freebsd-with-bastille-nginx-and-caddy/

#FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy