Small server progress

While I wait for cheap hardware to again become available I can still ready for some service migration. For naming my LAN machines I run nsd on my home router. Thanks to glue records it now also provides secondary DNS on its outward-facing interface, though via a second instance of nsd which does not offer BIND's views. I still have to shift that router machine over from OpenBSD to NetBSD: that should be easy but requires our being offline for a few hours. First I will shift my home-work computer: that runs on identical hardware so I can discover NetBSD driver gotchas before the router work.

I also completed another step: for me it is the time of year for SSL certificate renewal. I got my certificate signed then I adjusted my NetBSD testbed so that for HTTP, SMTP and IMAP the certificate is properly presented. Using the same configuration it should thus be easy to slot the certificate into a more permanent system. I also started offering even my simple home page via HTTPS given that the world seems to be going in that direction; previously I had limited the HTTPS side to only my non-public pages.