#pgbackrest is dead. What next?

https://mydbanotebook.org/posts/pgbackrest-is-dead.-now-what/

#PostgreSQL

Notice of Obsolescence #pgbackrest #postgres https://thebuild.com/blog/2026/04/27/notice-of-obsolescence/

Certbot doesn't define CN by default which is required by pgBackRest and OpenVPN as of today. I tried to use a CSR but Certbot doesn't automatically renew those certificates making certbot pointless. I'm now using acme.sh and it just works https://github.com/acmesh-official/acme.sh

#acme #acmesh #certbot #tls #ssl #openvpn #pgbackrest

I'm trying to learn how to parse SANs in C thanks to the source code of curl https://github.com/curl/curl/blob/935e1f9963a12ac1a880df538b23b824d2fea7bb/lib/vtls/openssl.c#L2073

Why? I would like pgBackRest to parse SANs before CN because CNs are deprecated for years and they are optional.

The problem is that no matter how hard I try to learn and write C, I fail.

I tried to implement Proxy Protocol for PGbouncer and PostgreSQL, failed.

I could open an issue, wait for a fix and cross my fingers or pray the gods, but I don't want to overload the project. My issue is not that important. What's important to me is the personal reward of contributing to open source. I want to learn. I want to contribute. I want to be a little part of the movement.

You should ask Claude they say. It will be fun they say. I'm not ready for that. I don't want to bypass everything for one of my side projects. But in the meantime, I'm frustated of failing. This is very tempting I must admit.

#opensource #curl #pgbackrest #pgbouncer #postgresql #ai

Let's Encrypt has stopped to provide certificates that can be used for authentication https://letsencrypt.org/2025/05/14/ending-tls-client-authentication

I used them for pgBackRest which suddenly stopped working very recently.

Let's use a private CA then.

#letsencrypt #pgbackrest #tls

for #selfhosting, it will be enough,i'm confident that my service can endure a powercut, so snapshot will be fine.

i haven't figured out how i will manage off-site backup, maybe export a tar from borg ? or rsync the repo even if it's not advised.