Egregoros

Signal feed

Timeline

Post

Remote status

Continuing my exploration of using garage S3 storage in my homelab [1], I managed to do a lot of things today. I can now use the certbot dns01 challenge on my own step-ca based Certificate Authority to generate wildcard certificates for my homelab and reconfigured nginx to reverse proxy web pages, straight from S3 buckets as https://<BucketName>.web.homelab.jhw. Yay! This will be explained in Part 3.

[1] https://jan.wildeboer.net/2026/01/1-Local-S3-With-Garage/

#Garage #S3 #SelfHost #SysAdminLife @homelab

Replies

1

Using this to host static websites is more or less a "nice to have" for me. The more important thing is that I can now freely create S3 buckets that are always reachable as `https://<bucketName>.s3.homelab.jhw` over the standard port 443, which is called "Virtual-hosted–style requests" in S3 lingo [1]. So all S3 traffic in my home network is encrypted and it JustWorks™ the way many applications expect it to work :)

2/2

[1] https://docs.aws.amazon.com/AmazonS3/latest/userguide/VirtualHosting.html#virtual-hosted-style-access

#Garage #S3 #SelfHost #SysAdminLife @homelab