Post #3600899

New on the blog: patching FreeBSD machines inside DN42 without giving them a clearnet route. A small dual-homed VM lazily caches pkg.freebsd.org, update.freebsd.org and ftp.freebsd.org with nginx proxy_store, chases CDN redirects server-side, and serves it all over IPv6 into the mesh. pf default-denies both directions, and clients keep verifying signatures against the official FreeBSD keys. It is also a public DN42 service: point freebsd-update, pkg or bastille at bsdmirror.chofstede.dn42 and go from empty jail host to fully patched without touching the clearnet. https://blog.hofstede.it/a-caching-freebsd-mirror-for-dn42-nginx-proxy_store-pf-and-a-dual-homed-vm/ #FreeBSD #DN42 #nginx #RunBSD #SelfHosting