Articles

Running CryptPad in a FreeBSD VNET jail with isolated networking, NAT via PF, and Caddy for TLS termination.

A technical deep-dive into running a modern, secure mail server on FreeBSD 15.0 using VNET jails, ZFS encryption, and GeoIP-aware firewalling.

Using LD_PRELOAD to surgically hide a PC/SC smartcard reader from a Rust-based OpenPGP SSH agent, allowing two incompatible hardware security stacks to coexist peacefully on the same system.

Using MaxMind’s GeoLite2 database with FreeBSD’s PF firewall to restrict client-facing services to specific countries, reducing brute-force attempts and log noise while keeping essential services globally accessible.

A custom Ansible connection plugin that enables native management of FreeBSD jails via jexec, without requiring SSH inside each jail.