Post #1313399
2026-03-30 12:11 UTC
Install is going pretty okay so far. There is an up-to-date FreeBSD port for kanidm. Interestingly it pre-creates directories in /var/lib and /var/run to use, yet there is no example config provided, so I have to properly map them myself.
Maybe I'll try doing another Ports contribution to improve that.
For now I gotta figure out how to do the certificate generation for kanidm. My usual setup is to do TLS termination on the Caddy load balancer, but kanidm needs to directly have access to the certificates. Fair enough, I just now gotta figure out how to deal with that :JanaThink:
Replies (2)
-
@jana@social.jsteuernagel.de 2026-03-30 12:22
This sent me down a little rabbit hole of looking at the intended folder structure of FHS again. Like according to FHS /var/lib is supposed to be used for state. Now why is it lib? That's kinda confusing. Funnily enough, FreeBSDs man page for hier claims /var/lib to be state information for ported Linux applications Which implies to me that "FreeBSD-native" applications should use something else? But nowhere in the man page can I find an alternative directory for this use-case? Confusing, but oh well, /var/lib/kanidm it is.
-
@xyno@mastodon.catgirl.cloud 2026-03-30 12:13
@jana this one just does self-signed certs between its load balancer and kanidm