triptico.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
Is there any "network device" simulators out there that would allow me to host 20+ network devices on one host to troubleshoot DHCP issues?
I would like to spin up a VLAN between some infrastructure switches, a DHCP server and a host. The host will just request a bunch of DHCP operations over a few hours simulating multiple devices. I prefer using it on #FreeBSD but would accept #Linux, macOS, and if I have to Windows.
I'm feeding bots with #FreeBSD. https://j.agrue.info/bot-feeding-on-freebsd.html. Many thanks to https://maurycyz.com/projects/trap_bots/ ! I (think I) improved the software slightly.
Do you know of AI bots using #GeminiProtocol ? Do you know what AI crawlers do and don't do, and what defenses work this week and don't? What are the next moves in what feels like a long game of cat-and-mouse?
The CfP for the BSD, illumos, OpenZFS, bhyve Devroom at FOSDEM 2026 is now available, you can start submitting your talk 🤩
https://people.freebsd.org/~rodrigo/fosdem26/
#Fosdem2026 #FreeBSD #OpenBSD #NetBSD #Illumos #ZFS #bhyve
boosts appreciated
Thank you, NetApp, for hosting the upcoming FreeBSD Vendor Summit, taking place November 6–7, 2025 at NetApp Headquarters in San Jose, CA.
We’re looking forward to joining industry partners, developers, and contributors for two days of collaboration, technical discussions, and strategic planning to help shape the future of FreeBSD.
🔗 Register here: https://www.eventbrite.com/e/november-2025-freebsd-vendor-summit-registration-1763651331609
Main: "Tionisla" - DELL Latitude e6540
FreeBSD 14.3-RELEASE-p5
Kernel: 14.3-RELEASE-p5 amd64
KDE/Plasma 6.5.0
https://bsd-hardware.info/?probe=7e1c664559
Kudos to the FreeBSD/KDE folks!
#FreeBSD #RunBSD #KDE #Plasma #kde_plasma #screenshot #desktop #unix
Hot take: pf's built-in connection tracking beats fail2ban/sshguard hands down.
One simple ruleset gives you automatic brute-force protection with ZERO userland daemons. No log parsing, no reaction delays, no additional attack surface.
table <bruteforce> persist
pass in proto tcp to port 22 flags S/SA (max-src-conn 5, max-src-conn-rate 3/30, overload <bruteforce> flush global)
Kernel-level enforcement, instant blocking, survives reboots with persist.
Why spawn Python processes when your firewall already knows?
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟱/𝟭𝟭/𝟬𝟯 (Valuable News - 2025/11/03) available.
https://vermaden.wordpress.com/2025/11/03/valuable-news-2025-11-03/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Hello, decided to log back into Mastodon as the bus to my town seems to have stopped a minute away from here for 20 minutes now. I have a few status updates regarding my tech adventures to share.
Firstly, I installed postmarketOS on a Samsung Galaxy S9 a few months ago, and with it, I moved to Alpine Linux on my laptop and desktop. The experience has been wonderful, but bumpy. It works really well on my laptop, but my desktop has faced some issues which I am happy to post on their mailing list once I am back home.
I also installed Arch Linux alongside my Alpine Linux installation as a redundant backup option in case one ends up broken by an update, or a mistake of my own. This has proven handy twice now, the second time ending up with my main system still under maintenance as of today. I also have a reserve Linux Mint USB, if it gets really bad, but I remain hopeful that it won't get that bad. Just for assurance, my ego has not inflated after installing it.
I still love using OpenBSD and FreeBSD when I can, but I deemed it more logical to use the operating system based off the kernel I want to develop for in the future. I plan on using OpenBSD on systems that I find to be not essential to use all the time, such as my brothers desktop, but I'm kind of bringing myself to use Alpine Linux on my daily drivers.
Sorry for disappearing for a while, this is a new phone which I forgot to install Mastodon on. My old phone drowned after my water bottle leaked during a walk, which meant I had to start over from scratch. I'm still addicted to Pixel phones however. Thanks for making a great operating system, #grapheneos team.
#OpenBSD #freebsd #alpinelinux #archlinux #BSD #Linux #technology #postmarketos
Secondary: "Tianve" - HP 250 G3
GhostBSD 25.02-R14.3p2
Kernel: 14.3-RELEASE-p2 amd64
KDE/Plasma 6.4.5/wayland
https://bsd-hardware.info/?probe=102fa9b597
#GhostBSD #FreeBSD #RunBSD #KDE #Plasma #kde_plasma #wayland #screenshot #desktop #unix
Proper FreeBSD system hardning :)
(all for sysctl)
security.bsd.see_other_uids
security.bsd.see_other_gids
--> Don't show other users processes
security.bsd.unprivileged_read_msgbuf
--> Don't allow unprivileges to read kernel buffer (dmesg)
security.bsd.unprivileged_proc_debug
--> Don't allow unprivileged to use debugging
security.bsd.hardlink_check_uid
security.bsd.hardlink_check_gid
--> restrict hardlinks to same user/group
kern.elf64.aslr.enable
kern.elf32.aslr.enable
--> Enable kernel address randomization (ASLR)
security.bsd.unprivileged_mlock
--> Restrict unprivileged users from loading kernel modules
sysctl kern.securelevel=1
--> Cannot lower securelevel
--> Cannot write directly to mounted disks
--> Cannot write to /dev/mem or /dev/kmem
--> Cannot load/unload kernel modules
--> Cannot change firewall rules (if compiled with IPFIREWALL_STATIC)
--> System immutable and append-only file flags cannot be removed
This can make a FreeBSD system more secure, especially on multi-user systems. Securelevel ca even go higher, but those restrictions generally need care.
#runbsd #freebsd #security #hardening #goodpractice #devops #sysadmin
New article: How to install Caddy with PHP-FPM on FreeBSD 14.3
https://r1os.com/sites/articles/how-to-install-caddy-on-freebsd-14-3.php
Earlier this year, I developed "ansible_jailexec", a modern Ansible connection plugin that can manage FreeBSD Jails via jexec via the host (incl. transparent file copy into the jails filesystem). All released under a BSD license.
That way, you can automate FreeBSD Jails via Ansible, even when they have no ssh or network connectivity.
On Codeberg: https://codeberg.org/Larvitz/ansible_jailexec
On GitHub: https://github.com/chofstede/ansible_jailexec/
The connection-plugin comes as a single python file (jailexec.py) and comes with Unit tests and internal safety checks.
Maybe someone finds it useful.
Happy automating
🙂
#freebsd #ansible #automation #bsd #automation #opensource #foss #jails
TIL that you can run OCI-compliant container images on #FreeBSD with #podman - either native or Linux-based: https://freebsdfoundation.org/blog/oci-containers-on-freebsd/ - this is giving me some ideas.
Dear fellow *BSD aficionado,
First and foremost: our sincere gratitude for your interest and intention to attend our conference. We love having such an amazing community and were looking forward to meeting you once again at the Late 25 edition of BSD-NL.
Unfortunately, we have to postpone this edition. We did not get enough ticket orders in to make it viable. Reflecting back, this was mainly our fault. We announced this edition way too late. Plus, there are other events at the same day, which is less than ideal. We will take these lessons to heart (and practice).
We will, most definitely, organise a new event somewhere in spring - the Early 26 edition. And we would like to see you there!
Sincere apologies. We will do better.
#BSDNL #RUNBSD #BSD #OpenBSD #FreeBSD #NetBSD #HardenedBSD #SecBSD #DragonflyBSD
Secondary: "Tianve" - HP 250 G3
GhostBSD 25.02-R14.3p2, based on FreeBSD
Kernel: 14.3-RELEASE-p2 amd64
KDE/Plasma 6.4.5/wayland
https://bsd-hardware.info/?probe=102fa9b597
#GhostBSD #FreeBSD #RunBSD #KDE #Plasma #kde_plasma #wayland #screenshot #desktop #unix
Time to add the storage to my new #FreeBSD box. Hoping this should make a nice raidz1 pool for a NAS.
BSDCan 2026 is now accepting submissions for the June 2026 conference, see https://www.bsdcan.org/2026/papers.html and links therein for instructions.
Submissions deadline is January 17, 2026, the conference runs tutorials June 17-18, talks June 19-20.
#bsdcan #conference #freebsd #netbsd #openbsd #bsd #development #networking #freesoftware #libresoftware
Run Linux containers on FreeBSD!
https://www.youtube.com/watch?v=HV-wUUzRCMo
https://freebsdfoundation.org/blog/oci-containers-on-freebsd/ ― an introduction | @FreeBSDFoundation
https://infosec.exchange/@david_chisnall/115450533582783930 |@david_chisnall
Plus:
• Fedora KDE pkg mgmt
• Debian vs systemd
• raconn — a smart tool for parallel SSH connections to multiple hostnames/IPs in one ProxyCommand. (https://blog.izissise.net/posts/raconn/)
• UBIOS (China’s UEFI-alt)
Read it 👉 https://newsletter.nixers.net/entries.php#311
“There are no life hacks, only trade-offs.” — James Clear
#Unix #Linux #FreeBSD #FOSS #SysAdmin #ReproducibleBuilds #SSH #Nixers
progress vps storage ane:
🟢 Install #FreeBSD minimal,
🟢 Install #BastilleBSD jails,
🟢 Install #garage object storage di dalam salah satu jail,
⚪ Install #postgresql di jails,
⚪ Install #Ente di jails,
⚪ Install #Gotosocial di jails,
⚪ Install #snac2 di jails,
⚪ Pasang pl-fe
masih jauh sekali perjalanan ini, dengan 1vCPU dan 2GB RAM semoga mampu ha ha ha ha
karena storage utama (OS) di VPS yang 20GB itu tidak cukup untuk menghandle jails, maka ane hapus semua dan reinstall sistem.
di VPS ane ada 2 disk, yaitu vtbd0 (20GB) sebagai disk primary dan vtbd1 (500GB) sebagai logical. Agar jails tidak habisin disk di vtbd0 maka ane set supaya folder jail pakai space storage di vtbd1.
proses reinstall cepet tapi ini pakai template dari VPS, problemnya swap yang dialokasikan cuma 512MB, menurut ane masih kurang maka ane tambah swap di vtbd1 sebesar 1GB sehingga total swap 1,5GB.
di vtbd1 ane bikin 4 partisi, seperti di gambar. Sekarang disk utama lebih lega dan ga khawatir out of space lagi.
🟢 Install #FreeBSD minimal,
🟢 Install #BastilleBSD jails,
🟢 Install #Caddy
🟢 Install #Garage object storage di dalam salah satu jail,
🟢 Install #Postgresql di jails,
🟡 Install #Ente di jails,
- 😊👍🏽 Build backed
- 🥲 Build frontend
⚪ Install #Gotosocial di jails,
⚪ Install #snac2 di jails,
⚪ Pasang pl-fe
✅ Install #FreeBSD minimal,
✅ Install #BastilleBSD jails,
✅ Install #Caddy
✅ Install #Garage object storage di dalam salah satu jail,
✅ Install #Postgresql di jails,
✅ Install #Ente di jails,
✅ Install #Gotosocial di jails,
✅ Install #snac2 di jails numpang jails Gotosocial
✅ Pasang pl-fe
🚫 Install #VaultWarden
GreenCloudVPS not bad at all
FreeBSD Graphics Stack Developer Position | FreeBSD Foundation
「 The FreeBSD Foundation is seeking a Graphics Stack Developer to contribute to our Laptop Support and Usability Project — a major initiative focused on enhancing the “out of the box” experience for FreeBSD users worldwide 」
https://freebsdfoundation.org/open-positions/freebsd-graphics-stack-developer-position/
So I was just going to have a "quick" play with my #FreeBSD box to test a few things. That was 2 hours ago, oops.
Still learning the basics, checking that power management is working (which it was automatically on this Intel N150), getting to know zfs, enabling smartd and monitoring etc.
Impressed how well it's all running on this little machine so far. Hopefully moving on to phase 2 at the weekend: adding the proper storage!
So, I get to build some ZFS file servers for $dayJorb. These will be hosting VM images. Does anyone have any thoughts on disk types and layout? I'm hoping for about 30 TB of usable space each. The last time I got to build this big, we did it with spinning rust because we were cost constrained. I am being lead to believe I have significant funding this time.
Using FreeBSD shouldn’t be scary 🎃
Every reliable update, enhancement, and supported platform depends on the work of the FreeBSD community — and the support that makes that work possible.
Your contribution plays a direct role in keeping FreeBSD stable, modern, and trusted.
Support the work that keeps FreeBSD running smoothly:
https://freebsdfoundation.org/donate/
The updated control panel at @BoxyBSD by @gyptazy
@gyptazy #FreeBSD #NetBSD #OpenBSD #FreeVPS #Hosting #IPV6 #BGP #DN42 #smolBSD #RUNBSD #BSD #BSDHosting #Hosting #FreeHosting #community #opensource
Serious question. Probably gonna get me flamed hard core for even asking.
Why doesn't #OpenBSD support #ZFS ? Is it ideological, or just financial?
I'm going to bed. I fully expect to get flamed into the ground for even asking. My phone is set to silent.
I ran OpenBSD as my primary fileserver from 1999 until 2011 or so, when ZFS and #FreeBSD were the far more obvious choice.
David Chisnall (*Now with 50% more sarcasm!*) » 🌐
@david_chisnall@infosec.exchange
The FreeBSD platform was merged into the OCI runtime spec!
FreeBSD is now an official target for OCI containers (it’s been working in Podman as an unofficial target for a while).
We’re one week away from the November FreeBSD Vendor Summit!
On November 6–7, join FreeBSD developers and industry partners at NetApp’s headquarters for two days of direct collaboration, technical discussion, and strategic planning.
📍 NetApp Headquarters | November 6–7, 2025
Save your spot:
https://www.eventbrite.com/e/november-2025-freebsd-vendor-summit-registration-1763651331609
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟱/𝟭𝟬/𝟮𝟳 (Valuable News - 2025/10/27) available.
https://vermaden.wordpress.com/2025/10/27/valuable-news-2025-10-27/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Pretty interesting how an old hardware works well and compute well in the strange configurations.
Prereqs: Intel Atom N2800 1866 MHz and 2 Gb RAM.
Since there are no NetBSD builds of xray-core and v2raya — I spin up a FreeBSD VM inside the Qemu and without NVMM accelerator (not supported by my CPU). Execute these programs inside this VM — and the server still running and even doesn't overload
Finally!
I'm happy to announce the R1OS Forum, a place for everyone interested in free and open source software that wants to discuss about it, get help using it, or simply want to be part of a new community.
https://r1os.com/sites/blog/forum-platform-launched.php
Forum: https://forum.r1os.com
#r1os #linux #freebsd #openbsd #netbsd #illumos #opensource #freesoftware
#FreeBSD testing BETA3 by progressively rolling it out in production, to find those sweet sweet bugs, before RELEASE, so you don’t have to.
Thank me later!
pkg query --evaluate '%o = base' '%o\n\n%e\n\n----\n\n'
Why does it not get descriptions of installed base packages?
pkg-query(8)
<https://man.freebsd.org/cgi/man.cgi?query=pkg-query&sektion=8&manpath=freebsd-ports>
111
ayuda | aide | Hilfe | aiuto | ajuda | hulp | hjälp | hjælp | hjelp | apu | pomoc | помощь | βοήθεια | yardım | مساعدة | עזרה | मदद | 帮助 | 助け | 도움
recently modified <https://bugs.freebsd.org/bugzilla/buglist.cgi?keywords=install&list_id=897815&order=changeddate%20DESC%2Cbug_id&query_format=advanced&resolution=--->
― or chronological <https://bugs.freebsd.org/bugzilla/buglist.cgi?keywords=install&list_id=897815&order=bug_id&query_format=advanced&resolution=--->
― the clock's ticking …
<http://archive.today/2025.10.25-015845/https://www.freebsd.org/releases/15.0R/schedule/#62%25> | <https://www.freebsd.org/releases/15.0R/schedule/#_additional_information>
Do want to hangout with like minded *BSD people? Are you using *BSD in any, way, shape or form? Professional? Daily driver? Occasional? As a hobby? Interested in it but don't know where to start?
You are in luck! You can still get your ticket for the BSD-NL Conference - Late 2025 ❗️🐡😈⛳
📆 2025-11-08 / November 8th 2025
🕐 10:00-23:00 CET
📍 Brouwerij Maximus (Utrecht)
🌐 https://bsdnl.nl
Get your 🎟️ at https://tickets.bsdnl.nl/bsdnl/late25/
#BSDNL #RUNBSD #BSD #OpenBSD #FreeBSD #NetBSD #HardenedBSD #SecBSD #DragonflyBSD
The latest article from the FreeBSD Foundation Journal is out: “Writing Effective Bug Reports”.
Want your issues seen, tracked, and fixed faster? Here’s how to help:
Clearly describe your setup — versions, architecture, customisations.
Define what you expected to happen vs. what actually happened.
Provide a reproduction path or minimal script if possible.
Let’s make reporting bugs easier and more effective, together.
👉 Read the full article here: https://freebsdfoundation.org/our-work/journal/browser-based-edition/embedded-2/writing-effective-bug-reports/
We at @BoxyBSD are happy to announce our new and modern website!
While the missions keeps the same by providing a free place for beginners to learn, educate themselves and test things in the wild on BSD-based systems (such like #FreeBSD, #NetBSD, #OpenBSD (or even #smolbsd) and many more ones) with public accessible IP addresses, the old nerdy design only hit a niche of users.
We want to make BoxyBSD more accessible & enjoyable to everyone and this is one of the first steps. We know, a laggy SSH connection doesn't make fun and therefore, we're also setting up new locations to provide you a better latency independent of your location.
During this time, signups for new users are currently deactivated until the new locations are up and running and the first real-user tests within the new interface have been successfully performed.
Web: https://boxybsd.com
Thanks to @gyptazy for this :)
#BoxyBSD #BSD #BSDHosting #Runbsd #vps #freevps #vpshosting #community #education
Is there any way in #FreeBSD of adding extra REQUIRES lines to RC scripts without modifying the script? I have an iscsi export that is exported over WireGuard. The iscsi scripts start after the network is up, but not after WireGuard starts. And so they try to bind go an IP that doesn't yet exist and fail (similar problems on the client and server, with different failure modes) and require manual prodding. I really want a thing in rc.conf or similar to be something like iscsid_extra_requires="wireguard" or similar.
Because of expenses and depreciation and corporate income taxes, I finally replaced my laptop. I wasn´t going to yet because ThinkPad and T480s still works properly. But there was that 40% promotion on a more recent ThinkPad so I jumped in.
It is #ThinkPad P14s Gen 5 AMD. I have installed both FreeBSD 14.3 and OpenBSD 7.8 on it and used it for a couple of hours. So far, sleep/resume, audio, accelerated video, X11, keyboard and touchpad, ethernet work as expected. The Qualcomm wireless card does not seem to be recognized by #FreeBSD. But it works on #OpenBSD! This is a great surprised because it wasn't supposed to, according to the online docs I found and I was ready to use a USB dongle.
I don´t really like the keyboard because Fn and Ctrl are not in the ThinkPad normal order. Also, the keys are a bit too thin for my linking - same as X1 Carbon - I like X280/T480s/X230i keyboards better. But all in all, the outside is quite nice, for a plastic thing.
And now, you can get the #dmesg here:
Will be working on a new build of BastilleBSD .iso images to include the latest advisory fixes and base updates.
In the meantime, here's your reminder to `pkg upgrade` / `freebsd-update fetch install` on your FreeBSD systems.
It’s time to install security patches freshly released on your #FreeBSD boxes without forget your jails and/or VMs.
Cool, my text about techniques to speed up FreeBSD suspend/resume now appeared on the Libreboot site!
https://vermaden.wordpress.com/2025/10/20/brave-new-pkgbase-world/
This is why a love @vermaden 's writings.
He's dogfooding and honest about FreeBSD, not hiding himself behind a Netflix's claim or BSD stickers on a MacSilicon/Wintel laptop.
Oh and before all, his posts are relevant and helpful!
Thanks pal you do a lot for the ecosystem!
Some technical details for those interested:
The entire FediMeteo setup runs on a FreeBSD VM costing around 4 euros per month. It supports almost all major EU countries (plus the UK), with just a few left to complete. Currently, there are 25 separate jails, each running its own instance of snac, totaling 25 instances. The VM load typically stays around 10%, which increases to 30% when updates are published for countries with larger numbers of cities (currently Germany and Italy). The only time the load spikes is when new countries are announced; during that time, all remote instances connect to all cities to download their details.
As for RAM usage, excluding the ZFS cache, it's currently a total of 213 MB. Yes, MB.
Client: Help, emergency. I have 24 hours to move my workload to another server. What do we do?
Me, five minutes later: "Done. Your workload is now running on the new server."
Client: "How did you move over 200GB with just a minute of downtime, from one provider to another and in a different country?"
Me: "Thanks to FreeBSD, ZFS, and a little bit of proactive planning."
I have a task that replicates all the VMs from one server to another every 15 minutes using zfs-send/zfs-receive. This VM connects to a VPN with two reverse proxies.
Meaning, when I move this VM, we don’t need to change any IPs since it’s not directly exposed.
I powered it off, cloned the differences in seconds, and restarted it.
Client in disbelief.
Me, relaxed and happy.
Thank you, FreeBSD, thank you, ZFS!
#FreeBSD #ZFS #TechSupport #ServerMigration #OpenZFS #SysAdmin #RunBSD
Announcing FediMeteo – Weather in the Fediverse!
UPDATE: I have created an account for updates and other information on FediMeteo - follow the account @admin to stay updated!
UPDATE: Ireland, Poland, Portugal and Switzerland have just been added
Weather has always influenced our lives: from agriculture to outdoor activities, to extreme events that, thanks to modern technology, can now be predicted with greater reliability. Personally, weather plays a significant role in my daily decisions, which is why I decided to create a service tailored for the Fediverse.
FediMeteo uses Open-Meteo data to publish updates every 6 hours, including current weather conditions, forecasts for the next 12 hours, and predictions for the upcoming days. Each country is served by its own dedicated instance (e.g., it.fedimeteo.com for Italy), managed through snac to ensure simplicity and efficiency in publishing.
You can follow FediMeteo directly in the Fediverse (on Mastodon and compatible platforms), via RSS, or by visiting the dedicated page for your city (e.g., fr.fedimeteo.com/paris).
Currently supported countries include:
Austria, Germany, France, Ireland, Italy, Netherlands, Poland, Portugal, Spain, Switzerland and the United Kingdom, – with many more regions coming soon!
FediMeteo is hosted on a FreeBSD-based VPS, with each country isolated in its own jail to ensure security and scalability.
Visit the main site to explore the national instances and start following your local weather updates today:
https://fedimeteo.com
Happy weather monitoring to all! 🌦️
FediMeteo is dedicated to my grandfather, who every evening would give me the weather forecast based on TV, radio, and his personal experience. He would convince me that the weather would be bad, so he had an excuse to accompany me to school instead of me going alone.
#FediMeteo #Announcements #FreeBSD #FediMeteo #WeatherForecasts #Weather #Meteo #snac #Fediverse #Mastodon
Right so my personal #snac instance seems to be working ok and I have managed to import all of the accounts I follow here on bsd.cafe . I'll still be using this account but will try and see how I get on with snac. You may notice that it always shows that I have no followers and that I'm not following anyone. This is intentional by the author of #snac as they feel numbers should not matter which is quite true. Feel free to follow me over there if you haven't already and hello to any new followers.
@justine@snac.smithies.me.uk
All of this is hosted in my #HomeLab on a #FreeBSd server jail running over my home FTTP connection. I'm impressed I've gotten this far. Next I'll be doing some html and css customisation's to theme it a little.
**BSD Mail Project Update!**
Hello everyone! I wanted to share some exciting updates about the development of BSD Mail, our privacy-focused email service designed with robustness, security, and transparency in mind. Here’s a deep dive into the technical choices I've made, focusing on my use of open source solutions and open protocols:
🌍 **Servers & Location**
- We're running on two physical servers:
- One hosted by OVH in France
- Another by Hetzner in Germany
- Both servers operate on FreeBSD with NVMe drives in a ZFS mirror configuration for speed and data integrity.
🔒 **Virtualization & Security**
- We utilize jails on both servers to ensure isolated environments for different services, managed via BastilleBSD. On one server, jails are set up directly on the hardware, whereas the other server employs nested jails.
- Each server hosts a bhyve VM running OpenBSD with OpenSMTPD for handling SMTP duties securely.
🔗 **Networking**
- A Wireguard setup connects the two servers, facilitating routing capabilities so that jails and VMs can communicate seamlessly, supporting both IPv4 and IPv6.
📧 **Email Services**
- **Dovecot** is configured for maildir replication across the servers using Dovecot sync, ensuring email availability and redundancy.
- **Rspamd** instances are tied to local KeyDB jails, set up in master-master replication for consistent and reliable spam detection and greylisting.
- **ClamAV** runs in corresponding jails for virus scanning, maintaining a high level of security.
- **SOGo** provides a web interface for email management, connected to MySQL databases in master-master replication to handle sessions and authentication smoothly.
💾 **Data Management**
- Email data is stored on separate, encrypted ZFS datasets to secure emails at rest.
- MySQL databases are used for storing credentials and managing sessions for SOGo, also in a master-master replication setup. Importantly, all passwords are securely hashed using bcrypt, ensuring they are salted and safe.
🔎 **Monitoring & Reliability**
- Our DNS is managed through BunnyNet, which continuously monitors our server status. Should one server—or a specific service—become unavailable, DNS configurations are dynamically adjusted to avoid directing users to the affected IP until full service is restored.
🌐 **Commitment to Open Source and Open Protocols**
- Every component of BSD Mail is built exclusively using open source software and open protocols. This commitment is crucial for ensuring data freedom and the reliability of the solutions we use.
This setup not only emphasizes our commitment to privacy and security but also our dedication to maintaining an open and transparent platform.
We're excited to bring you a service where your privacy, data integrity, and freedom are prioritized. Stay tuned for more updates!
#BSDMail #OpenSource #Privacy #FreeBSD #OpenBSD #EmailHosting #Email