summaryrefslogtreecommitdiff
path: root/gemfeed
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2024-04-13 00:15:08 +0300
committerPaul Buetow <paul@buetow.org>2024-04-13 00:15:08 +0300
commitf42d9230e976a7332c25f6d97dd20112e92bcffc (patch)
treeacd6ce5642e5363476458f1200d66cc04e5eefa1 /gemfeed
parent662ef574c042604d1ffddfaec475442d44f3377b (diff)
Update content for md
Diffstat (limited to 'gemfeed')
-rw-r--r--gemfeed/2024-04-01-KISS-high-availability-with-OpenBSD.md12
1 files changed, 6 insertions, 6 deletions
diff --git a/gemfeed/2024-04-01-KISS-high-availability-with-OpenBSD.md b/gemfeed/2024-04-01-KISS-high-availability-with-OpenBSD.md
index 542e4c60..f5477fe3 100644
--- a/gemfeed/2024-04-01-KISS-high-availability-with-OpenBSD.md
+++ b/gemfeed/2024-04-01-KISS-high-availability-with-OpenBSD.md
@@ -196,8 +196,8 @@ Check out the whole script here:
I am renting two small OpenBSD VMs: One at OpenBSD Amsterdam and the other at Hetzner Cloud. So, both VMs are hosted at another provider, in different IP subnets, and in different countries (the Netherlands and Germany).
-[https://openbsd.amsterdam](https://openbsd.amsterdam)
-[https://www.hetzner.cloud](https://www.hetzner.cloud)
+[https://OpenBSD.Amsterdam](https://OpenBSD.Amsterdam)
+[https://www.Hetzner.cloud](https://www.Hetzner.cloud)
I only have a little traffic on my sites. I could always upload the static content to AWS S3 if I suddenly had to. But this will never be required.
@@ -213,8 +213,8 @@ A split-brain scenario between the old master and the new master might happen. T
With the DNS failover, HTTP, HTTPS, and Gemini protocols are failovered. This works because all domain virtual hosts are configured on either VM's `httpd` (OpenBSD's HTTP server) and `relayd` (it's also part of OpenBSD and I use it to TLS offload the Gemini protocol). So, both VMs accept requests for all the hosts. It's just a matter of the DNS entries, which VM receives the requests.
-[https://man.openbsd.org/httpd.8](https://man.openbsd.org/httpd.8)
-[https://man.openbsd.org/relayd.8](https://man.openbsd.org/relayd.8)
+[https://man.OpenBSD.org/httpd.8](https://man.OpenBSD.org/httpd.8)
+[https://man.OpenBSD.org/relayd.8](https://man.OpenBSD.org/relayd.8)
For example, the master is responsible for the `https://www.foo.zone` and `https://foo.zone` hosts, whereas the standby can be reached via `https://standby.foo.zone` (port 80 for plain HTTP works as well). The same principle is followed with all the other hosts, e.g. `irregular.ninja`, `paul.buetow.org` and so on. The same applies to my Gemini capsules for `gemini://foo.zone`, `gemini://standby.foo.zone`, `gemini://paul.buetow.org` and `gemini://standby.paul.buetow.org`.
@@ -250,7 +250,7 @@ The ACME automation is yet another daily CRON script `/usr/local/bin/acme.sh`. I
Let's encrypt certificates usually expire after 3 months, so a weekly failover of my VMs is plenty.
[`acme.sh.tpl` - Rex template for the `acme.sh` script of mine.](https://codeberg.org/snonux/rexfiles/src/branch/master/frontends/scripts/acme.sh.tpl)
-[https://man.openbsd.org/acme-client.1](https://man.openbsd.org/acme-client.1)
+[https://man.OpenBSD.org/acme-client.1](https://man.OpenBSD.org/acme-client.1)
[Let's Encrypt with OpenBSD and Rex](./2022-07-30-lets-encrypt-with-openbsd-and-rex.md)
### Monitoring
@@ -275,7 +275,7 @@ Rex isn't part of the OpenBSD base system, but I didn't need to install any exte
Other high-available services running on my OpenBSD VMs are my MTAs for mail forwarding (OpenSMTPD - also part of the OpenBSD base system) and the authoritative DNS servers (`nsd`) for all my domains. No particular HA setup is required, though, as the protocols (SMTP and DNS) already take care of the failover to the next available host!
-[https://www.opensmtpd.org/](https://www.opensmtpd.org/)
+[https://www.OpenSMTPD.org/](https://www.OpenSMTPD.org/)
As a password manager, I use `geheim`, a command-line tool I wrote in Ruby with encrypted files in a git repository (I even have it installed in Termux on my Phone). For HA reasons, I simply updated the client code so that it always synchronises the database with both servers when I run the `sync` command there.