Login
You're viewing the embassy.social public feed.
  • Larvitz :fedora:Larvitz@burningboard.net
    Oct 24, 2026, 9:59 AM

    2/3 Also done today:

    Checked the Node.js October security release (Brotli CVE-2026-111497). Our streaming server never decompresses untrusted Brotli data, so the risk is low. We'll update as soon as the FreeBSD package is out.

    The streaming server now properly verifies the database's TLS certificate.

    Rewrote our rc.d scripts the way rc.subr intends: supervisor pidfile, automatic restart after a crash, and "service restart" works on the first try. Background: blog.hofstede.it/freebsd-found

    Package updates on the host and in all jails

    nginx: separate cache directories, a nearby DNS resolver (thousands of DNS errors gone) and a catch-all for unknown hostnames

    We retired our Tor onion service

    Lots of small cleanups after a deep health check

    💬 1🔄 1⭐ 0

Replies

  • Larvitz :fedora:Larvitz@burningboard.net
    Oct 24, 2026, 10:00 AM

    3/3 One thing you might have noticed: between Oct 22 and today, burningboard.net could not send any e-mail. After a package cleanup, the mail configuration pointed to a CA certificate file that no longer existed. It's fixed now.

    If you were waiting for a confirmation or password reset mail, please just request it again. Sorry about that!

    Tonight we're repacking the database (pg_repack) to get rid of bloat. You shouldn't notice anything.

    Thanks for your patience, and enjoy your weekend! 💚

    #MastoAdmin #FreeBSD

    💬 1🔄 1⭐ 0
  • 💬 0🔄 0⭐ 0