gyptazy.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
New blog post: Hosting a Static Blog on FreeBSD with Bastille Jails
A deep dive into my self-hosting setup:
- FreeBSD 15.0 with securelevel 2
- Bastille jails for isolation (Caddy, Nginx, deployment gateway)
- PF firewall with strict NAT/RDR rules
- CI/CD via Forgejo Actions with rrsync-restricted deployments
- nullfs mounts for zero-copy file sharing between jails
The "transporter pattern" keeps the blog jail unexposed while enabling automated deploys. Jails remain the most elegant isolation mechanism around.
New blog post: Hosting a Static Blog on FreeBSD with Bastille Jails
A deep dive into my self-hosting setup:
- FreeBSD 15.0 with securelevel 2
- Bastille jails for isolation (Caddy, Nginx, deployment gateway)
- PF firewall with strict NAT/RDR rules
- CI/CD via Forgejo Actions with rrsync-restricted deployments
- nullfs mounts for zero-copy file sharing between jails
The "transporter pattern" keeps the blog jail unexposed while enabling automated deploys. Jails remain the most elegant isolation mechanism around.
On Thursday, @gyptazy provided a talk about #BoxyBSD at the "Virtualization Gathering" at @credativde.
@gyptazy provided some more information about the BoxyBSD project, but also about the history and infrastructure including the switches of #FreeBSD #Jails, #bhyve and #Proxmox (#kvm). Afterwards, additional information about the #Sylve project were shared and why this is so important and interesting and could make BoxyBSD return to bhyve based #virtualization.
Slides: https://cdn.gyptazy.com/talks/BoxyBSD_Virtualization_Hypervisor_bhyve_Proxmox_credativ_gyptazy.pdf
Recording: https://peertube.gyptazy.com/w/2HtUv9HFBNEU4sEw52bD8H
Take the time to read {again} how Stephan has built a self hosted CDN using OpenSource programming and tools.
He literally shares the code. From what I processed, this method can scale up quite easily. You can build a super large CDN yourself using similar modus operandi.
No corporate CDN, but the insight, resilience and technical expertise of a great programmer, with the Passion and Curiosity of someone visionary.
All powered by OpenSource BSD IPv6 jails DNS caching and enthusiasm
Thank you Stephan
#CDN #networking #cache #IPv6 #IPv4 #programming #technology #BSD #freeBSD #jails #DNS #Wireshark
https://it-notes.dragas.net/2024/08/26/building-a-self-hosted-cdn-for-bsd-cafe-media/
I'm using Bastille to run jails on FreeBSD 15-0-RELEASE.
Does it matter (to Bastille) if I use templates, or can I just manually apply the setup from a template's Bastillefile?
Bastillefile example:
https://github.com/BastilleBSD/templates/blob/main/databases/mariadb-server/Bastillefile