Post #1313398
2026-03-30 11:35 UTC
Now for the plan:
I'll install it in a FreeBSD jail. Anyone surprised? Didn't think so :D
I will likely setup replication, which is natively supported, to have a replica running on my home server. That's for redundancy sake, but also for "having working SSO, if the internet were to cut out", so I don't get complaints about Jellyfin not working :D
I'll look into maybe putting it into my AS, so that I can use the edge routers as load balancers for the two replicas.
So overall: Not too complicated (except for the AS part, as that will require me to build out more parts of the network that I have not yet looked at).
Replies (1)
-
@jana@social.jsteuernagel.de 2026-03-30 12:11
Install is going pretty okay so far. There is an up-to-date FreeBSD port for kanidm. Interestingly it pre-creates directories in /var/lib and /var/run to use, yet there is no example config provided, so I have to properly map them myself. Maybe I'll try doing another Ports contribution to improve that. For now I gotta figure out how to do the certificate generation for kanidm. My usual setup is to do TLS termination on the Caddy load balancer, but kanidm needs to directly have access to the certificates. Fair enough, I just now gotta figure out how to deal with that :JanaThink: