social.dk-libre.fr is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.
This server runs the snac software and there is no automatic sign-up process.
No, I won't try to debug a perl script that does weird things. I'll just write the reverse lookup zone by hand.
#ItsAlwaysDNS Finally learning IPv6, a thing I tried to avoid for the longest time. All my servers are reachable via IPv6, I know how to do that, but now I am learning to set up IPv6 in my home(lab) network and wrapping my head around concepts like ULAs (Unique Local Addresses, that don't route to/from the internet), prefixes I get from my ISP and how all of that translates to DNS entries on my BIND9. Mistakes will be made.
1/4
#ItsAlwaysDNS I took the plunge. Configured my Fritz Box to hand out my new DNS server to all DHCP devices. So now DNS requests go first to my BIND9, which resolves homelab.jhw. If it can't answer, it forwards to the Fritz Box, who takes care of the local fritz.box domain. And if that doesn't work it goes out to the internet. Seems to work :) I can now reach my homelab machines under their homelab.jhw name and with a valid certificate. Yay! Updated the gist too.
3/3
#ItsAlwaysDNS This is rather advanced stuff, but I brain dumped how I configured my Bind DNS server for my homelab that allows all my servers, containers etc to resolve local and global names. Just the config, no detailed explanations. Might do that as a blog post. Should I?
https://codeberg.org/jwildeboer/gists/src/branch/main/2025/20250826DNSHomelabBind9.md
UPDATE: Blog post done, see https://social.wildeboer.net/@jwildeboer/115113695729233240
1/3
Yes, explain Bind!: | 104 |
No, it will go wrong: | 1 |
Just the results: | 4 |
Closed
#ItsAlwaysDNS but I managed to get my own BIND9 name server up and running on the Raspberry 4 in my homelab. So I can now continue with setting up a new Certificate Authority (CA) as container. (please refrain from replying with "use dnsmasq!" or other solutions. I know what I am doing and I am stubborn. I'm a BIND9 guy. Period. :)