home.social

#bastillebsd — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #bastillebsd, aggregated by home.social.

  1. Manpage Monday: bastille rdr

    Redirect a host port straight to a jail. No hand-editing pf.conf.

    Forward TCP traffic from host:80 to jail:80
    > bastille rdr myjail tcp 80 80

    Bind the redirect to only a specific interface:
    > bastille rdr -i vtnet0 myjail tcp 80 80

    Limit the redirect to a single source IP:
    > bastille rdr -s 200.200.200.200 myjail tcp 80 80

  2. New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy.

    A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data.

    The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries.

    blog.hofstede.it/hosting-dokuw

    #FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy

  3. Seven years of running FreeBSD on ThinkPads alongside Linux — lessons I'd give my younger self

    <reddit.com/r/freebsd/comments/> @Darknessraptor

    "I daily-drive Linux at work and FreeBSD on my personal ThinkPads (T480 & P52 currently). Both laptops and both operating systems, every day. I'm the kind of person who reads freebsd-update output and Phoronix benchmarks in the same hour.

    "Recently saw the "is FreeBSD really that goated" thread and it brought back the timeline of my own journey. Started with a rough —call it version 0.9 — build that barely had X11 working, evolved through five iterations, landed on something I'd call "production-stable personal desktop" around version 2.0 on FreeBSD 15.0 with a heavily customized MATE, ZFS boot environments, BastilleBSD jails for microservices, WireGuard tunnels and PF.

    "If I could send a packet back in time to my earlier self, here's what I'd put in the payload: …"

    Postscript: @Darknessraptor (quoted above) has joined Mastodon.

    The image here is not his, it's for <reddit.com/r/freebsd/comments/> because we can all agree that em dashes make scintillating conversation.

    #goated #X11 #Wales #FreeBSD #BSD #Linux #ZFS #OpenZFS #Beastie #daemon #MyLittlePony #unicorn #dolphin #rainbow #IBM #Lenovo #BastilleBSD #WireGuard #AI #purple