home.social

#bastillebsd — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #bastillebsd, aggregated by home.social.

  1. When your jails are on a private network how do you reach them from the outside? Redirect the port from the host:

    bastille rdr TARGET tcp 443 443
    bastille rdr TARGET tcp 2200 22

    List them with bastille rdr TARGET list, clear with ... clear.

    VNET jails don't need and don't use this.

  2. Manpage Monday: bastille pkg

    Manage packages inside your jails without ever consoling in.

    Install nginx in myjail
    > bastille pkg myjail install nginx

    Use the host's pkg binary instead of the jail's
    > bastille pkg -H myjail install nginx

    Works with any pkg args: update, upgrade, search, audit, info, etc

  3. New on the blog: Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy.

    A deliberately small, database-free wiki: one application jail, central Caddy ingress, PHP-FPM over a Unix socket, and explicit nginx rules protecting DokuWiki’s private data.

    The interesting part isn’t getting a page to render. It’s drawing clean security and backup boundaries.

    blog.hofstede.it/hosting-dokuw

    #FreeBSD #DokuWiki #BastilleBSD #SelfHosting #Caddy