New blog post: Hosting a Static Blog on FreeBSD with Bastille Jails
Uncategorized
1
Posts
1
Posters
0
Views
-
New blog post: Hosting a Static Blog on FreeBSD with Bastille Jails
A deep dive into my self-hosting setup:
- FreeBSD 15.0 with securelevel 2
- Bastille jails for isolation (Caddy, Nginx, deployment gateway)
- PF firewall with strict NAT/RDR rules
- CI/CD via Forgejo Actions with rrsync-restricted deployments
- nullfs mounts for zero-copy file sharing between jailsThe "transporter pattern" keeps the blog jail unexposed while enabling automated deploys. Jails remain the most elegant isolation mechanism around.
-
undefined stefano@mastodon.bsd.cafe shared this topic