A Caching FreeBSD Mirror for DN42: nginx proxy_store, pf, and a Dual-Homed VM

🫧 Open on Bubbles Table of Contents Table of Contents At a Glance Architecture The Host pf: Default Deny, Both Directions nginx: A Lazy Mirror with proxy_store The pkg Mirror (Port 8080) The freebsd-update Mirror (Port 80) The Release Mirror (Port 8081) What About Trust? Client Configuration The Proof: 15.0 to 15.1 Over the Mesh The Full Jail Lifecycle Operational Notes Public DN42 Service Lessons Learned Conclusion References Since joining DN42 , the number of FreeBSD machines living inside the mesh has qu