Sign in Subscribe

opnsense

OPNsense related articles.

OPNsense - WAN Bridging for Public IP Addressing

OPNsense - WAN Bridging for Public IP Addressing

With only a single public /29 subnet available, consuming the remaining two addresses from the range is a challenge. After some research, the not ideal bridging solution is the best of the worst solution as seen in the picture below. The diagram below from the pfSense documentation illustrates a typical

OPNsense(23.7) - bugfix ACME Plugin Upload to Hashicorp Vault

OPNsense(23.7) - bugfix ACME Plugin Upload to Hashicorp Vault

When trying to use the OPNsense ACME Client feature to upload Let's Encrypt certificates to Hashicorp Vault, it needed to be fixed. The challenge started when the automation began to fail because it could not find the VAULT_TOKEN as an environment variable. At first, it seemed easy

OPNsense(23.7) - Acme Plugin Upload Certificates to Hashicorp Vault

OPNsense(23.7) - Acme Plugin Upload Certificates to Hashicorp Vault

Let's Encrypt certificates are a blessing, no doubt. But they come with an inconvenient fact that they short live—usually, three months. And their rotation is easy if you have just a few around; however, when you have more than ten around your infrastructure, their rotation becomes a

OPNsense - HAproxy How to Remove www. from Requests

The times changed and we are not used to type www. before an URL anymore. However, some automated systems or "old code" out there might still add www. in front of an URL. To avoid such issues, we can use HAproxy to remove the www. from the request.