These steps were carried out on FreeBSD 11.0 with PostgreSQL 9.6 (two of my favorite tools). I like logging. I like logging PostgreSQL. With logs, you can see what happened. Without, you can only guess. Setting up logging for PostgreSQL involves several parts, each of which must be completed or else I don’t get what […]
PostgreSQL – logging to a file Read More »
This is mostly a note to myself. #### Edit: 2018.09.08 : If you see messages like this: $ sudo gmirror insert swap /dev/da5p2 gmirror: Class not found $ gmirror list -a gmirror: Command ‘list’ not available. You probably need to do this: sudo kldload geom_mirror #### I had these drives: They are involved in this
Creating a gmirror swap Read More »
Now that I have configured my webserver to pull down any new certificates, now it’s time to configure my clients to pull certificates from the webserver. In my quest for a centralized Let’s Encrypt solution, I’ve created the FreeBSD port for acme.sh (an ACME client for Let’s Encrypt) and anvil, a tool for distributing and
cert-puller: using anvil to pull down & install new certificates, then restart services Read More »
In my Let’s Encrypt implementation, I am using a centralized acme.sh solution which generates all the certificates I use and authenticates via dns-01 challenges. I use anvil to distribute those certificates. In this post, I will describe how the website pulls the certificates down from the rsync-jail. I will assume you have read my previous
anvil – copying the certificates to the website Read More »
I have already described how I use acme.sh to obtain SSL certificates from Let’s Encrypt. Today, I’m going to show you how I use anvil to copy those certificates from the original location to another directory, which is then used for rsync by another jail. Throughout this blog post, it is assumed that the cert-shifter
cert-shifter: copying certificates from acme.sh to a fresh directory Read More »
I’m in the end-stages of finishing off my centralized Let’s Encrypt solution and I’ve released my code as an open source project named anvil. I’ve also created a FreeBSD port. In this post, I outline the anvil tools and how I use them. In future posts, I will detail the individual components, some of which
Introducing anvil – Tools for distributing ssl certificates Read More »
This blog post describes my Let’s Encrypt solution which uses acme.sh and dns-01 challenges to obtain SSL certificates. If you are using HTTP challenges, this post might still be useful, but your configuration will differ slightly. Let’s Encrypt is a certificate authority which has become wildly popular since it was launched in April 2016 (just
acme.sh: getting free SSL certificates – installation configuration on FreeBSD Read More »
NOTE: I wrote this post nearly two years ago, in May 2015. It has been sitting ignored and unloved in my Drafts. I’ve just published it today. I’m big on backups and I use Bacula. I have about 18 TB on about 350 tapes and about 10 TB of backups on disk. I want more.
My first big Tarsnap backup Read More »
First, all credit goes to Mark Felder’s blog post upon which this is based. You can buy an Apple Time Capsule (I did) to back up your Mac. Now that I have two MacBook’s, I have run out of space, so now I want to backup to ZFS. By backing up to my ZFS filesystem:
Creating an Apple Time Capsule using FreeBSD & ZFS Read More »
NOTE: this post has been replaced by a newer version. The older post is still available This is x8dtu (named after the Supermicro motherboard). This will be the new FreshPorts server. In short: FreeBSD 11 booting off a mirrored pair of zfsroot SSDs 4.5TB of mirrored ZFS 196612 MB of RAM (yeah, that’s 196GB of