<p>I’ve been trying to up my <code>use-package</code> game recently and converted my hand rolled package check and installer to <code>use-package</code>. I usually prefer to use packages from <code>melpa-stable</code> so I pin the default package source used by <code>use-package</code> to <code>melpa-stable</code> and override it where necessary That’s working well in general and looks something like this:</p>

<p>While I was implementing a few more changes on my web server - mostly adding the sorely needed blacklistd configuration for sshd - I noticed that NGINX’s log was showing occasional errors when trying to contact the <a href="https://posativ.org/isso/">Isso</a> process. They all had one thing in common, namely that they were all trying to contact ISSO via IPV6 as the server has both stacks enabled. Turns out that isso only listens on an IPV4 socket and I could not find an obvious way to…

<p>I may have mentioned this before - I do run my own virtual servers for important services (basically email and my web presence). I do this mostly for historic reasons and also because I’m not a huge fan of using centralised services for all of the above. The downside is that you pretty much have to learn at least about basic security. Over the 20+ years I’ve been doing this, the Internet hasn’t exactly become a less hostile place. Anyway, Elliptic Curve Certificates, what…

<p>First, I apologise for not noticing that the comments had been broken for a while. This was entirely my fault and not fault of <a href="https://posativ.org/isso/">ISSO</a>, which I’m still super happy with as a self-hosted comments system. So in this post I’m going to describe what went wrong, and also how I made the system a little more resilient at the same time.</p>

<p>I’ve blogged about <a href="https://www.lonecpluspluscoder.com/2019/12/27/building-an-openbsd-wireguard-server/">putting together a WireGuard server using OpenBSD a couple of years back</a>. The main purpose of the server was to ensure a slightly more secure connection when I was on hotel WiFi. Of course thanks to the pandemic, I have barely travelled in the past couple of years so the server was mostly dormant. In fact, I kept VM turned off for most of the time. The VPN server was set…