Upgraded two of my HTTPS nodes, nothing went boom. Also upgrade and rebooted home physical firewall/router, works fine. DoH listener in Unbound working fine. Upgraded authoritative DNS server, works fine.

    nginx version: nginx/1.30.2
    built by gcc 15.2.0 (Alpine 15.2.0) 
    built with OpenSSL 3.5.6 7 Apr 2026

    Unbound Version 1.25.1
    Linked libs: libevent 2.1.12-stable (it uses epoll), OpenSSL 3.5.6 7 Apr 2026
    Linked modules: dns64 cachedb subnetcache respip validator iterator

    chronyd (chrony) version 4.8 (+CMDMON +REFCLOCK +RTC +PRIVDROP +SCFILTER +SIGND -NTS -SECHASH +IPV6 -DEBUG)

    HAProxy version 3.4.0-64a335366 2026/06/03 - https://haproxy.org/
    Status: long-term supported branch - will stop receiving fixes around Q2 2031.

    NSD version 4.14.2

▲ gigatexal 5 hours ago | parent [-]

Been looking at Linux but I can’t pry myself away from openbsd and pf cuz the syntax is so nice.

You got any blog or something about your alpine router?

▲

Bender 5 hours ago | parent [-]

I should write up something about that as a few people have asked. I'm using nftables for the firewall. I disable IPv6, some may not like that.

▲

yjftsjthsd-h 4 hours ago | parent [-]

IIRC IPv6 is mostly copying the same firewall rules, so if people want that I think it'd be easy for them to add?

	▲	Bender 4 hours ago \| parent [-]
		The nftables rules are very easy for IPv6. I have the rules for it in place, just prefer to disable it out of personal preference.