New blog post - Rewriting URL's using OpenBSD and httpd.conf
This is just a reminder for future me, when I forget how I got it to work next time.
There's nothing particularly interesting, unless you also get stuck trying to get a URL redirected to another directory.
https://martin.hatstand.org.uk/posts/2024/rewriting-with-httpd/
The slow and steady progress on the homelab / home network cleanup continues.
Now I've finally figured out what I was missing from relayd.conf to get my tls certificates issued, I've moved my blog to the new host. It's not perfect, but it's progress and seems to be working OK for the moment but I'm log watching for anything outstandingly bad I might have broken in the process.
The cleanup and migration of my homelab has stalled recently. Partly because I've had lots of other stuff to do at home but also because I got myself backed into a corner.
I was working on migrating my blog to the new server but couldn't get TLS working. I had a test site up using plain old HTTP, and even had a LetsEncrypt certificate being issued, but I couldn't get the proxy to work using TLS.
It turms out, all I needed to do was walk away from the problem for a week and when I returned I would instantly spot the missing "tls" keyword in my config. Once added, "it just works", like all of the examples said it should. No more excuses for not moving the blog now so that's back on the plan for weekend.
Likely a blog post to follow, so when I forget again next time, I have something to look back on.
New Blog Post
OpenBSD relayd and httpd woes
tl;dr - 5 hours going round in circles with something that appears to be simple. Still not fixed, just brain dumping.
https://martin.hatstand.org.uk/posts/2024/2024-11-28-openbsd-and-relayd-woes/
Finally getting back to cleaning up my home lab and starting to work on the VM hosting my blog. I'm not moving the blog yet, instead I stood up a new simple page so I can work out the kinks first.
I've got simple HTTP traffic working through my reverse proxy and I've just managed to persuade acme-client to retrieve a certificate that appears to be in the right location on the server.
tcpdump on the reverse proxy can see my inbound traffic arriving on port 443 but no sign of the website loading. Debugging....
EDIT: erm, yeah, local server firewall rules allowing traffic on TCP/443 would help, but get me another error, but that's still progress.
I've made some more progress with the home lab cleanup over the last few days.
I moved our Wireguard "server" off of the OpenBSD host where I initially set it up and onto our firewall. Moving the client configuration was a bit of a pain as I didn't have a good export/import process but it didn't take me too long. It probably took me longer to remove all the static routes and gateways off the firewall and other home servers.
There were a few things I needed to figure out after the change that generated some strange connection issues but it looks like everything is stable again. One more VM server I can retire.
More slow and steady progress tonight. I've got the backup of our home task management application up and running. It's pretty low tech but it's running.
I've also migrated my RSS aggregator, FreshRSS, onto the new host. I had a few stumbles along the way but it's up and running.
Slow and steady progress with the home lab clean-up.
Completed a backup and recovery migration with our home wiki. I say "our" home wiki but I've yet to "launch" it so I'm the only one feeding it with data. But, it's migrated to the new host and is reachable via the reverse proxy with its new URL.
I still need to sort out the backup process for the first service I moved, our home project management application (yes, Mrs P is way more organised than I am) but I'll get these.
That's one LXC container and one Ubuntu VM shutdown, plus a couple of other VM's I had powered down "just in case".
A bit more progress on the home lab cleanup, even though I said I was going to take a break earlier.
I didn't do any more config or server charges but I have a couple of new pages in my wiki (yet to be migrated) for the new servers and a few updated pages to make things clearer.
Slow and steady wins the race.
Udovič Arns 
Martin Pugh