triptico.com is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
Still not sure what #nogoome is about?
Want to learn what and why we do things we do?
Details are sumed up here:
https://about.nogoo.me
Big new v0.3 release of my #OpenBSD audio/video recording #CLI convenience utility, #recordctl, is now out:
https://github.com/morgant/recordctl/releases/tag/0.3
Building on v0.2, which switched to a clearer, more scriptable, MIB-like control syntax like sysctl(8), mixerctl(8), and sndioctl(1), it now features:
1) A monitor (`-m`) mode showing changes to control values over time, like sndioctl(1) `-m`
2) A `mix.monitor` control which exposes/manipulates whether sndiod(8) is configured for a "monitor mix"
There is a reason I build my own routers!
As I have said I am BSD Agnostic. I have an OpenBSD router on a Protectli box.
Hmmm, something is wrong with my include statement in my #sway config on #OpenBSD, and I can't quite figure it out...
The pertinent line in ~/.config/sway/config:
include ~/.config/sway/config.d/`hostname`
The result when it was running under Debian 13:
00:00:00.766 [DEBUG] [sway/config.c:797] Read line 38: #Include per-system config files first
00:00:00.766 [DEBUG] [sway/config.c:797] Read line 39: #include ~/.config/sway/config.d/*
00:00:00.766 [DEBUG] [sway/config.c:797] Read line 40: include ~/.config/sway/config.d/`hostname`
00:00:00.766 [INFO] [sway/commands.c:381] Config command: include ~/.config/sway/config.d/`hostname`
00:00:00.766 [INFO] [sway/commands.c:404] After replacement: include ~/.config/sway/config.d/`hostname`
00:00:00.770 [INFO] [sway/config.c:422] Loading config from /home/ram/backups/config/sway/config.d/intrepid
The result under #FreeBSD:
00:00:00.799 [DEBUG] [sway/config.c:781] Read line 38: #Include per-system config files first
00:00:00.799 [DEBUG] [sway/config.c:781] Read line 39: #include ~/.config/sway/config.d/*
00:00:00.799 [DEBUG] [sway/config.c:781] Read line 40: include ~/.config/sway/config.d/`hostname`
00:00:00.799 [INFO] [sway/commands.c:381] Config command: include ~/.config/sway/config.d/`hostname`
00:00:00.799 [INFO] [sway/commands.c:404] After replacement: include ~/.config/sway/config.d/`hostname`
00:00:00.803 [DEBUG] [sway/config.c:781] Read line 41:
Version:
rld@Intrepid:~$ sway -v
sway version 1.11
It's not running hostname for any reason.
Any ideas, anyone?
So I was able to do a VPN tunnel to my web server in the U.S. running #OpenBSD
Just removed #PHP 8.3 and installed 8.4. The installation is now different: Previously, you uncommented the modules you want to run. Now, you copy their .ini from:
/etc/php-8.4-sample/* to /etc/php-8.4/.
I really like this approach as it's a lot cleaner
Also copied :
/usr/local/share/examples/php-8.4/php.ini-production to /etc/php-8.4.ini
I rarely stray from defaults and it's running beautifully so far for me
Installing #openbsd is easy, but what does it take to keep your system in trim?
Here is a piece I wrote, "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html to provide some pointers (also at https://bsdly.blogspot.com/2024/09/you-have-installed-openbsd-now-for.html if tracking is not a thing you worry about) #maintenance #sysadmin #dailytasks #dailydriver
The rpki-client project needs financial support https://www.undeadly.org/cgi?action=article;sid=20251119083420 #openbsd #rpkiclient #routing #security #networking #bgp #rpki #pki #freesoftware #libresoftware
Static Web Hosting on the Intel N150: FreeBSD, SmartOS, NetBSD, OpenBSD and Linux Compared
Update: This post has been updated to include Docker benchmarks and a comparison of container overhead versus FreeBSD Jails and illumos Zones.
#ITNotes #freebsd #illumos #jail #linux #netbsd #openbsd #ownyourdata #server #smartos #sysadmin #zoneshosting
Farts, my cool little media PC won't work with OpenBSD because
the audio is hdmi and OpenBSD doesn't support hdmi audio.
https://man.openbsd.org/azalia.4
last line :(
We may have been a bit silent - but for good reason, since we are working behind the scenes to improve our infrastructure 
For instance, we now operate our own nameservers (rather than using those of friendlies). And we've kicked a mailserver online dedicated to Exquisite:
$ dig +short exquisite.social ns
ns1.exqinfra.nl.
ns2.exqinfra.nl.
ns3.exqinfra.nl.
dig +short exquisite.social mx
10 mx1.exqinfra.nl.
Naturally, it does run #OpenBSD
The nameservers are configured with nsd and the mailserver uses Stalwart.
More goodies to follow in the upcoming weeks 
Where Have You Been for the Last 20 Years?
Walking away from the BSDCan final reception at Lowertown Brewery, Ottawa. The perfect end to a life-changing experience.
https://my-notes.dragas.net/2025/06/17/where-have-you-been-for-the-last-20-years/
#BSDCan #MyNotes #FreeBSD #NetBSD #OpenBSD #DragonFlyBSD #Life #BSDCan2025 #LiveLife
RE: https://mastodon.social/@nixCraft/115566280074527897
"Just" 270 MB for...an idle server?
Debian is still a great distribution but let's measure the ram consumption of a freshly installed *BSD or Illumos based server. The numbers are totally different.
#RunBSD #illumos #FreeBSD #OpenBSD #NetBSD #DragonflyBSD
Freshly installed Debian 13 Linux on a server just uses 270MB of RAM. Of course, once I install PgSQL, Redis, Apache 2/Nginx or Lighttpd, Python/PHP/Docker, etc., it will eat up 10GB. It is amazing how much good Debian is as compared to other bloated OSes out there, and it is all free. I can't believe that. Thank you all Debian devs for keeping it real.
boosted25 years ago (and a couple months), I got my hands on my first few m88k systems.
Back then, there had been no #OpenBSD release for this platform ever completed due to compiler (gcc 2.8 back then) bugs, we were using a.out binaries without shared libraries, and I had zero knowledge of gcc internals.
Today, OpenBSD/luna88k, which runs ELF binaries and shared libraries, has been switched to PIE userland by default, using gcc 4.2.1: https://freshbsd.org/openbsd/src/commit/NstsoXqDBQGMNHRP
What a journey it has been!
@justine
Could I ask whether #OpenBSD has a G.U.I or is it entirely command line?
It's just, every picture you post seems to lack any graphical input.
#askingforafriend
🤓
/etc/installurl to have the following and I get a successful snapshot update.#https://cdn.openbsd.org/pub/OpenBSDNo more SHA256 errors and I'm now running.
https://www.mirrorservice.org/pub/OpenBSD
kern.version=OpenBSD 7.8-current (GENERIC.MP) #102: Mon Nov 17 04:24:27 MST 2025#OpenBSD
deraadt@amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
sysupgrade -s today for the 17th November snapshot and I'm getting the packages download then fails with SHA256 errors on them all.Update changed install URL to UK Kent mirror and all is fine. Was using the default CDN one.
Last week I had a chat with a colleague who is highly specialized in Microsoft solutions. Young but not too young, smart, not very up to date simply because he has little time for anything else. His specialization depends entirely on where he works, not on personal interest. Lately he seemed a bit disillusioned with some choices made by "other operating systems", and he was starting to consider moving his personal projects toward Microsoft as well, since he already had the experience. Still, he said it with boredom. With the attitude of someone who is tired of wasting time.
He had heard of the BSDs but had never tried installing them. He was convinced that there were no decent hypervisors outside the Linux world and that KVM belonged to Linux alone. I had the terrible idea of showing him the BSDs, how great bhyve is, and how nvmm on NetBSD uses qemu underneath, making it almost a replacement for KVM in many setups. He lit up with the look of someone waking up from a long sleep. I also had the terrible idea of showing him illumos and its distributions. He had no clue it existed and thought old, great Solaris had been dead for years thanks to Oracle.
He called me a little while ago. He was furious. He spent the whole weekend doing tests and now he has no idea what to use among FreeBSD with bhyve, NetBSD with nvmm, and illumos with bhyve or kvm. He is slowly starting to explore jails and illumos zones. He was annoyed (in a positive way) because now he does not know what to pick since everything feels so different from what he was used to, and he found advantages in each option.
I am obviously happy about it, but I also wonder: instead of reinventing the wheel every time, would it not sometimes be better to simply broaden our horizons?
#IT #SysAdmin #OperatingSystems #FreeBSD #Linux #NetBSD #OpenBSD #DragonflyBSD #illumos #SmartOS #OmniOS #OpenIndiana #Tribblix
RE: https://mastodon.bsd.cafe/@vermaden/115564165835643603
I look forward to the @vermaden weekly newsletter as much as I anticipate a perfect tiramisu after a superb lunch. It is truly the cherry on top.
That special something that helps me kick off the week in style.
#RunBSD #FreeBSD #OpenBSD #NetBSD #DragonflyBSD #Linux #IT #SysAdmin
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟱/𝟭𝟭/𝟭𝟳 (Valuable News - 2025/11/17) available.
https://vermaden.wordpress.com/2025/11/17/valuable-news-2025-11-17/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟱/𝟭𝟭/𝟭𝟳 (Valuable News - 2025/11/17) available.
https://vermaden.wordpress.com/2025/11/17/valuable-news-2025-11-17/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
Are you working on something involving a BSD system that you would like to share with others?
The Call for Papers period is open for AsiaBSDCon until November 30th, 2025 and for BSDCan until January 17, 2026.
Check out the websites linked in the article, and get that submission in!
What is BSD? Come to a conference to find out! https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html or https://bsdly.blogspot.com/2025/11/what-is-bsd-come-to-conference-to-find.html #asiabsdcon #bsdcan #bsd #dragonflyBSD #freebsd #openbsd #netbsd #conference
The Call for Papers period for both #AsiaBSDCon and #BSDCan are open, until end of November for AsiaBSDCon, until Jan 17 for BSDCan.
If you can, submit!
Or read "What is BSD? Come to a conference to find out!" https://nxdomain.no/~peter/what_is_bsd_come_to_a_conference_to_find_out.html if you want some background information #bsd #freebsd #openbsd #netbsd #dragonflyBSD
If you are looking for #PF resources for #openbsd and #freebsd alike, the up to date slides for the #tutorial are at https://nxdomain.no/~peter/pf_fullday.pdf with updates for each session.
In addition, we (the good people at @nostarch and yours truly) are working to get the 4th edition of The Book PF ready and available as soon as possible (see https://nxdomain.no/~peter/yes_the_book_of_pf_4th_ed_is_coming.html or tracked https://bsdly.blogspot.com/2025/07/yes-book-of-pf-4th-edition-is-coming.html)
On the relatively useless Lenovo #ThinkPad T14s #Snapdragon Gen 6¹ I am running #OpenBSD/arm64 tracking the -current branch (just updated my snapshot).
Of course lots of things either don't work or are partially supported, one important item which is supported is the battery so that's good.
I'm trying to get a USB A WiFi dongle to work to get WiFi on it (I am using it wired-only) but I was wondering how I can help getting the internal Qualcomm WiFi and/or the full screen resolution to work (mine is the "2.8K" 2880 x 1800 OLED).
To be honest what works on OpenBSD has been rock solid compared to the Ubuntu installation I originally had!
Anyway, if someone wants to point me in the right direction …
__
¹ I have written at length at how terrible the machine is, even under Windows, never mind anything else.
Just some initial memory comparisons between my two tiny VPS servers - one running httpd/relayd on OpenBSD, the other running Caddy on Alpine Linux:
OpenBSD: 99M / 464M
Alpine: 50M / 464M
Both instances are hosting 3-4 simple, static websites. Interesting stuff (to me at least!)
current aka 16th November amd64 snapshot using an encrypted boot and everything works. #OpenBSD

@claudiom Good Morning! I too had my system borked after an upgrade yesterday. Mine has an encrypted nvme drive. It hangs after entering a correct passphrase.
I’m able to boot and drop to shell on an install img on usb, mount the encrypted drive to see that all my data is still there. Just unsure what to do next to fix? Any thoughts? What did you do to get yours going?
Renewed my @OpenBSDAms VM. Relatively modest price increase considering inflation. Service has been totally rock solid, no reservations whatsoever about going for a second year.
I use that VM to server my #HorrorFiction website (https://ferenbrooke.com) and its mirror on the #geminiprotocol (gemini://ferenbrooke.com). I like that it's hosted in Europe and #openbsd is my favourite OS, so knowing that a portion of my payment goes towards the project is a big plus for me.
Pssst! BoxyConnect comes soon to @BoxyBSD!
BoxyConnect allows you to create a private network / private link between multiple boxes at BoxyBSD. And the best? You can even create this over different locations/countries to provide you more flexibility.
You can simply assign any RFC1918 addresses on your new additional network interface on both sites and communicate in your own private network - even miles away.
This feature is currently in beta and will hopefully be available to everyone (just like all other services of course for free). Enjoy #RUNBSD!
This new feature is powered by @gyptazy!
#BoxyBSD #FreeBSD #NetBSD #OpenBSD #DragonflyBSD #MidnightBSD #SmolBSD #Hosting #SelfHosting #Provider #BSD #FreeVPS #VPS #opensource #community #education #openeducation
sysupgrade -s with today's snapshot dated 16th November using amd64 ?
I remember that a few months ago, there was a bit of a brouhaha around #dovecot removing a few features in the next release of the free open source version of the server (as is their right, I'm stating a fact and not complaining about it).
As my #selfhosted dovecot instance apparently had been up for long enough to have the TLS cert expire (oops), that had me thinking - is there a fairly simple #IMAP server available, kind of in the vein of #OpenBSD's #opensmtpd or httpd that supports imaps and reading emails from Maildir, but with otherwise fairly low count of bells and whistles?
root# sysupgrade -s http://ftp.hostserver.de/archive/2021-10-09-0105/ but obviously swap out the URL for one mentioned in Solenes blog from the snapshot archives ?after today sysupgrade -s on #openbsd I am unable to unlock my encrypted disk. When I write the password laptop stuck and nothing happened. Do you have any idea how to solve it?
The runbsd.eu mailserver (OpenBSD + Postfix + Dovecot + OpenDKIM) is just about done. When it is done done, the blogpost will be there too.
RE: https://mastodon.bsd.cafe/@gumnos/115551343732704834
This is a great post.
It's not "against" something - it just explains why Tim prefers to use the BSDs.
#RunBSD #FreeBSD #NetBSD #OpenBSD #DragonflyBSD #IT
Having answered the question a number of times, I decided to finally document¹ why/how I ended up using BSDs instead of Linux, taking a page from @vermaden's playbook².
tl;dr: a bit of push from Linux, a bit of pull from the BSDs.
After replying to an e-mail in the bugs@openbsd.org mailing list regarding the borked bootup, Theo de Raadt replied and confirmed that a snapshot went out without the commit for the ABI break, and it was replaced by a newer snapshot that did have it. He recommended updating using a miniroot snapshot.
Downloaded the latest miniroot78 snapshot from an #OpenBSD mirror, brewed some water for my mate as the miniroot78 snapshot image written to a USB drive, and then booted from it on the laptop. Update went through wonderfully and I'm back to a booting OpenBSD system. 🧉
#RunBSD
Transition to support for 52 partitions https://www.undeadly.org/cgi?action=article;sid=20251114105005 #openbsd #storage #52partitions #disks #bigdisks #partitioning #development #freesoftware #current #libresoftware
This Isn't a Battle
After reading a post describing the FreeBSD community as 'toxic', I share a different perspective. This isn't a battle. It's a reflection on coexistence, the original Open Source spirit, and the quiet richness of taking a different path.
https://my-notes.dragas.net/2025/11/14/this-isnt-a-battle/
#MyNotes #IT #SysAdmin #FreeBSD #NetBSD #OpenBSD #Linux #OpenSource
Heads up, #OpenBSD -current is preparing for >16 partition disklabels (increased to 52). If you're not using sysupgrade(8), and manually upgrading, you need to pay special attention to this change.
deraadt@ modifed src/sys/*: Begin transition to 52-partition support. The partition encoding used to be lowest 4 bits of dev_t, and now becomes 6. This supplies 64 partitions in struct disklabel.d_partitions[MAXPARTITIONSUNIT], but we only use 52 of these slots (an architecture can be either 16 partition or 52 partition, depending on MD define MAXPARTITIONS). The 52-partition limit is due to single-character representation limit of a-zA-Z. We supply a backwards-compat ioctl for a while which can read an disklabel structure.
This change does not yet store 52-partition information on-disk, and does not transition any architecture to allowing use of >16 partitions.
Those changes come soon, after this compatibility breaking change settles.Immediate result is dev_t numbers for /dev/{sd,wd,rd,fd,...}[12345...][a-p] become incorrect, and need to be repaired. A sysupgrade will do this for automatically. For a hand-build, or a manual kernel replacement, systems which have root NOT ON SD0 or WD0, probably fail into single-user and you must perform these steps explained in /etc/rc:
# fsck /dev/rrootdisk
# mount -uw /dev/rootdisk /
# cd /dev && ./MAKEDEV redodisksPlease do not try to manual-build through this on a system earlier than 7.8.
with and ok krw
Can someone assist with #openbsd install real quick? I've download the latest iso, go through the basic install process (no encryption) but when I reboot after it's completed my laptop tried to boot via PXE. When I select the ssd from the boot menu nothing happens. I have disabled Secure Boot in BIOS and made sure UEFI options are on. Tried on a Thinkpad T480s and Thinkpad T14 Gen 3.
I just added LibreOffice to my newish OpenBSD laptop. It runs great. I had originally gone with Abiword and Gnumeric, but I wanted to work with encrypted documents, and Abiword also crashed upon trying to open any ODT file.
Source and state limiters introduced in pf
https://www.undeadly.org/cgi?action=article;sid=20251112132639 #openbsd #pf #networking #statelimiters #sourcelimiters #statetracking #packetfilter #security #freesoftware #libressoftware
"This change has our resident packet manglers quite excited, and they think it will likely be a signature feature that will make the not-too-distant OpenBSD 7.9 release even more of an Internet favorite."
Big news for small /usr partitions https://www.undeadly.org/cgi?action=article;sid=20251112121631 #openbsd #sysupgrade #install #upgrading #usr #smalldisks #freesoftware #libresoftware
got and gotweb where my dotfiles and what not will reside. I'm going to have to reinstall OpenBSD as release as it's maybe not a good idea to use current on a server ? What do you good folk think ? 
Does anyone know how I can tell doas under #OpenBSD to allow my user to bring up an OpenVPN tunnel? Just adding the path to the command with
permit nopass setenv { PATH } myuser as root cmd /usr/local/sbin/openvpn
does not seem to do the trick, something about creating interfaces methinks.
What is the way to do this?
Hope my fellow #OpenBSD developers are having an amazing time in Coimbra, Portugal this week at the #h2k25 #hackathon!
Latest 𝗩𝗮𝗹𝘂𝗮𝗯𝗹𝗲 𝗡𝗲𝘄𝘀 - 𝟮𝟬𝟮𝟱/𝟭𝟭/𝟭𝟬 (Valuable News - 2025/11/10) available.
https://vermaden.wordpress.com/2025/11/10/valuable-news-2025-11-10/
Past releases: https://vermaden.wordpress.com/news/
#verblog #vernews #news #bsd #freebsd #openbsd #netbsd #linux #unix #zfs #opnsense #ghostbsd #solaris #vermadenday
bathing
I use @OpenBSDAms btw
#unix_surrealism #openbsd #vmm #vmd #poster #comic #linux #plan9 #glenda
Long trek home.
#technomage #openbsd #openbsdgaming #unix_surrealism #puffy #ksh #comic #fediart #mastoart #art
RE: https://mastodon.social/@pitrh/115509098143295810
The BSD conferences are magical. The atmosphere is friendly. It's a family - a good one - with different views but a common goal: making great things, making smart choices in a positive environment.
#RunBSD #FreeBSD #NetBSD #OpenBSD #EuroBSDCon #BSDCan #AsiaBSDCon
Almost running everything on #OpenBSD
- Desktop on mini PC
- Desktop on X201 laptop
- Home router
- Two tiny VPS hosts (web servers)
Not that it NEEDS to be OpenBSD, it’s just that I have the least amount of friction with that OS.
Hey #NetBSD 🚩community! There's been discussion over the years about whether the NetBSD project should have its own unique mascot (separate from the general BSD Beastie).
I outlined a proposal for one back in 2021, including some concepts:
https://mail-index.netbsd.org/netbsd-advocacy/2021/01/21/msg000828.html
What's the general feeling today? #RunBSD #OpenSource #FreeBSD #OpenBSD #DragonflyBSD
| Yes, we need a unique mascot!: | 0 |
| No, the flag/Beastie is enough.: | 0 |
| I'm not sure / No opinion.: | 0 |
| Just show me the results.: | 0 |
Closes in 16:22:40:37
https://www.openbsdhandbook.com/storage/#software-raid-with-softraid
Just stumbled upon this, nothing really new here, but it is nicely done and fairly complete:
Awesome #OpenBSD
Yes, the @bsdcan 2026 Call for papers is open! See https://www.bsdcan.org/2026/papers.html, submissions deadline is 17 January 2026.
#bsdcan #cfp #callforpapers #conference #bsd #freebsd #openbsd #netbsd #freesoftware #libresoftware
@stefano I once went with my boss from the college to visit Dundee University in Scotland. We came into this huge room with #iMacs on each table. I was drooling!
When we came home I argued that we needed something like that.
"I'll let you buy a keyboard" my boss said.
I bought the keyboard ;)
Then I left for another college. 5 years later one of my old colleagues came for a visit. Out of his bag came the keyboard, "I believe this is yours" he said.
I still use that wonderful iMac keyboard on my #openbsd home server every day.
#nostalgia
rio-like configuration for base openbsd fvwm2
Prehistoric AI, OpenBlade's relative
#unix_surrealism #lispmachine #openblade #openbsd #technomage #comic
Heads up for people applying the first syspatch(8) for #OpenBSD 7.8, which is actually for the syspatch(8) utility itself.
There are instructions in the errata patch for if it fails.
If syspatch fails (probably because /usr is not a separate filesystem), perform these steps:
sed -e 's/.checkfs/#checkfs/g' /usr/sbin/syspatch > /root/syspatch
ksh /root/syspatch
syspatch # re-run new syspatch command as instructed
rm /root/syspatch
dev_mkdb
Thanks to everyone involved. All hail the fish.
The Man of MATA pt1
next: https://merveilles.town/@prahou/115271822786360293
pls consider supporting my work: https://analognowhere.com/support
#unix_surrealism #comic #technomage #openbsd #linux #penguin #mata
Me: huh, I don't remember logging out of my session on the kids' #OpenBSD laptop…oh, right, I did a `doas sysupgrade`, it did the upgrade, rebooted into 7.7, and returned uneventfully to the login screen without requiring any additional intervention or thought.
There's something wonderful about an upgrade-process so boring that you can accidentally forget you did it.
I got asked if I could create a #howto for creating a (public) #NAT64 service - just like I did recently for #BoxyBSD. With #DNS64 and #NAT64 you can also reach resource in the legacy internet (#IPv4) on #IPv6 only systems.
While this is based on #unbound and #tayga, there’s also a solution by using the #OpenBSD's native way which is also running on the other gateway. I’ll share a second how to how to do this in OpenBSD and pf.
https://gyptazy.com/howto-create-a-public-dns64-nat64-gateway/
While I was mucking about with an #openbsd port, I got an email from github offering me access to their ai code writing uselessness.
No! Bad website!
*spritzes with water bottle*
My code doesn't work at the moment. Broken is still better than this offer.
This is my favorite part of the OpenBSD installer because I get it wrong every time, but I love that they anticipated it! #openbsd
**BSD Mail Project Update!**
Hello everyone! I wanted to share some exciting updates about the development of BSD Mail, our privacy-focused email service designed with robustness, security, and transparency in mind. Here’s a deep dive into the technical choices I've made, focusing on my use of open source solutions and open protocols:
🌍 **Servers & Location**
- We're running on two physical servers:
- One hosted by OVH in France
- Another by Hetzner in Germany
- Both servers operate on FreeBSD with NVMe drives in a ZFS mirror configuration for speed and data integrity.
🔒 **Virtualization & Security**
- We utilize jails on both servers to ensure isolated environments for different services, managed via BastilleBSD. On one server, jails are set up directly on the hardware, whereas the other server employs nested jails.
- Each server hosts a bhyve VM running OpenBSD with OpenSMTPD for handling SMTP duties securely.
🔗 **Networking**
- A Wireguard setup connects the two servers, facilitating routing capabilities so that jails and VMs can communicate seamlessly, supporting both IPv4 and IPv6.
📧 **Email Services**
- **Dovecot** is configured for maildir replication across the servers using Dovecot sync, ensuring email availability and redundancy.
- **Rspamd** instances are tied to local KeyDB jails, set up in master-master replication for consistent and reliable spam detection and greylisting.
- **ClamAV** runs in corresponding jails for virus scanning, maintaining a high level of security.
- **SOGo** provides a web interface for email management, connected to MySQL databases in master-master replication to handle sessions and authentication smoothly.
💾 **Data Management**
- Email data is stored on separate, encrypted ZFS datasets to secure emails at rest.
- MySQL databases are used for storing credentials and managing sessions for SOGo, also in a master-master replication setup. Importantly, all passwords are securely hashed using bcrypt, ensuring they are salted and safe.
🔎 **Monitoring & Reliability**
- Our DNS is managed through BunnyNet, which continuously monitors our server status. Should one server—or a specific service—become unavailable, DNS configurations are dynamically adjusted to avoid directing users to the affected IP until full service is restored.
🌐 **Commitment to Open Source and Open Protocols**
- Every component of BSD Mail is built exclusively using open source software and open protocols. This commitment is crucial for ensuring data freedom and the reliability of the solutions we use.
This setup not only emphasizes our commitment to privacy and security but also our dedication to maintaining an open and transparent platform.
We're excited to bring you a service where your privacy, data integrity, and freedom are prioritized. Stay tuned for more updates!
#BSDMail #OpenSource #Privacy #FreeBSD #OpenBSD #EmailHosting #Email