DrPetzWenn man sich selbst die Firewall so hart falsch einstellt, dass DNS Anfragen nicht durchgehen, ne.
Einfach nicht wundern, dass nix geht. 🤷♂️
ajIt's a casually fiddling with sql in prod day. #SysAdminLife
Jan Wildeboer 😷
Today I want to thank the teams and communities behind
- #Forgejo [1]
- #Garage [2]
- #Kopia [3]
for delivering (major) updates of their software (which if course is Open Source) that consistently JustWork™ in my experience, making the update process simple, reliable and, yes, fun! I know how hard that is and I tip my hat to all of you and many other projects that do the same.
[1] https://forgejo.org
[2] https://garagehq.deuxfleurs.fr
[3] https://kopia.io
Garage (Open Source, AGPL licensed S3 compatible Object Storage) has just released V2.2.0. The upgrade went without a hitch. My single node instance and the three node cluster are now happily running it. What I do notice however is that 2.2.0 comes as a 42MB binary, whereas 2.1.0 was "just" 26MB. That's quite a hefty growth in size.
Nicolas SAPA 
#Note2Self: Always. Update. The. Version. Number. In. Bind. Zone. Files. After. Any. Change.
(written after removing dozens of tmp-* files in /var/named that suddenly showed up, together with weird permission denied entries in the log files ;)
Using this to host static websites is more or less a "nice to have" for me. The more important thing is that I can now freely create S3 buckets that are always reachable as `https://<bucketName>.s3.homelab.jhw` over the standard port 443, which is called "Virtual-hosted–style requests" in S3 lingo [1]. So all S3 traffic in my home network is encrypted and it JustWorks™ the way many applications expect it to work :)
2/2
Continuing my exploration of using garage S3 storage in my homelab [1], I managed to do a lot of things today. I can now use the certbot dns01 challenge on my own step-ca based Certificate Authority to generate wildcard certificates for my homelab and I reconfigured nginx to reverse proxy web pages, straight from S3 buckets as https://<BucketName>.web.homelab.jhw. Yay! This will be explained in Part 3.
1/2
[1] https://jan.wildeboer.net/2026/01/1-Local-S3-With-Garage/
IZ5WGAOrbene, ho aggiornato Mastodon a Glitch Soc 4.6, ho modificato Authentik per fornire lo username al posto dello UUID a Mastodon, manipolato il database postgres per riagganciare le identità e ricostruito le timeline. Direi che posso anche dormire -.- #sysadminlife
New blog post: Garage part 2: adding nginx as reverse proxy to my private S3 Storage
https://jan.wildeboer.net/2026/01/2-S3-Garage-Behind-Nginx/
Replies to this post will show up as comments under the blog post.
