Tootfinder

Calling "increasingly evaluating migration paths" what's otherwise been a necessary migration due to deprecation is a funny perspective. 😂
https://www.cncf.io/blog/2026/05/25/zero-downtime-migration-from-ingress-nginx-to-envoy-ga…

Zero-Downtime migration from ingress NGINX to Envoy Gateway
Teams running Ingress NGINX in production are increasingly evaluating migration paths as Kubernetes networking evolves toward Gateway API. For many organizations, the challenge is not just selecting a…

I did it, everyone. After decades of my server running Apache, I finally switched over to Nginx.
..Just in time for everyone to switch to Caddy.

Security firm Calif says it used OpenAI's Codex to discover HTTP/2 Bomb, a remote DoS exploit affecting web servers like Nginx, Apache HTTPD, and Microsoft IIS (The Hacker News)
https://thehackernews.com/2026/06/new-http2-bomb-vulnerability-allows.html…

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
HTTP/2 Bomb exploits HPACK and flow control; a single client can hold 32GB memory in 20 seconds, causing server outages.

welp.
#footiMac remains in a state. If you are reading this, that is a small victory :)
I tried a few things but it remains burdened by I/O activity.
it was still overwhelmed even when I shut down mastodon and nginx so I think it is either the constant sftp traffic or something related to the update to Trixie that I am as yet unaware of.
Regardless, I am taking the opportunity to create docker containers on another machine for postgres and redis to live on.
I'm now waiting for a database dump to complete so that I can try migrating those services over and leaving footiMac to only do nginx and sidekiq
Probably work on it some more tomorrow. Until then this account will be up and down. But at least I'm learning and that's what I like to do.
#mastoadmin

I updated my guide on how to deploy self-hosted #Discourse. The configuration of the internal nginx (inside the container) recently changed (for the better) in a way that affected my previous advice.
I seem to have been maintaining this guide for over five years now; I started in June 2021. 79 edits so far, most of which have been mine.

I was wondering why none of my #FreeBSD systems got the latest #nginx - so I searched... and it took me a good hour again to figure out that the OS is by default insecure; you need to actively change the repo settings in order to get recent software with bug fixes - latest instead of quarterly:

Change between `quarterly` and `latest` package set used by `pkg` tool in FreeBSD
The pkg tool in FreeBSD is usually set to draw upon either the quarterly or latest package set. The latest set may churn more often with updates, while the quarterly is meant to be more stable but ...

Wooo, I have made many graphs and they look good. Proxmox is now pushing to Influx as well. I still need to get Grafana behind `nginx`, but I can do that later.
#homelab #monitoring #influx

🐘⚡ PHP-FPM trick ☝️
One endpoint needs 5 min worst-case,
but the rest should still die after 90s?
− Spin up a 2nd FPM pool nginx map on a query param.
Routing happens automatically.
🎯 The best part: zero lines of code touched
Setup ⤵️
https://gist.github.com/michabbb…

Mein Dialog mit der KI:
Es ist nicht wirklich wichtig. aber ich wollte es verstehen. Ich verstehe es aber nicht.
07:52
Claude hat geantwortet:
Ich auch nicht — und das ist die ehrliche Antwort. Wir haben jeden Layer systematisch ausgeschlossen:
nginx ✅ identisch
Ghost ✅ identisch
Firewall ✅ kein IP-Blocking
robots.txt ✅ identisch
og:image Tags ✅ korrekt und abrufbar
Security-Header ✅ identisch
Ghost-Logs …

Because it is too much of a hassle to trace down obnoxious users of one of my services, I implemented rate limiting on #nginx #lfm #rss #obnoxiousclients

Finally got the Pihole on 443 behind some nice valid certs. Didn't take too much effort, the longest part was getting the ports set correctly on the Pihole server so it was only listening on localhost. A little `acme.sh` `nginx` later and everything looks good.
#homelab #dns

Any ways I could like somehow host a Minecraft server in my NAS and then use my free tier VPS with tailscale to let people access the server without needing to get into my VPN?
I do that with nginx for some web pages, but that's http which is a completely different story...