Post #2300573
2026-05-08 21:50 UTC
@bt@mastodon.bsd.cafe Great!
If you get the time and inclination, I'd be happy to know the results you get with tipidee (which is available on Alpine) and s6-tlsserver to serve it, also available on Alpine (in the s6-networking package). I wrote them thinking of low resources environments. The TLS layer is done by bearssl, for practically no RAM at all: no need to offload it 😃
Replies (2)
-
@bt@mastodon.bsd.cafe 2026-05-09 01:10
@ska@social.treehouse.systems Interesting stuff! (Went down the rabbit hole reading through the QuickStart etc). I’ll certainly take a look since I have an identical RPiZ with Ethernet HAT waiting to be used as well
-
@rachelplusplus@tech.lgbt 2026-05-09 08:04
@ska@social.treehouse.systems @bt@mastodon.bsd.cafe Obviously terminating TLS on the server would be ideal, but if that ends up not being viable, I wonder if routing the backhaul over Wireguard would help? That would make sure the server proxy traffic is encrypted, but also wireguard can transparently handle changes of IP address (as long as both ends don't change at the same time!). Which might help if your ISP changes your address on you