Install Let's Encrypt SSL with Certbot (Apache) on OpenBSD 7.5

Step 1 – Install

pkgin install py310-certbot py310-certbot-apache 2>/dev/null || pkg_add certbot

Step 2 – Obtain and install

certbot --apache -d example.com -d www.example.com

Step 3 – Verify

apachectl configtest && systemctl...

Install Let's Encrypt SSL with Certbot (Nginx) on OpenBSD 7.5

Step 1 – Install Certbot + Nginx plugin

pkg_add certbot py3-certbot-nginx

Step 2 – Obtain certificate

certbot --nginx -d example.com -d www.example.com

Certbot modifies Nginx config and optionally redirects HTTP to HTTPS.

Step

Install MariaDB on OpenBSD 7.5

Step 1 – Install and secure

pkg_add mariadb-server
mysql_install_db
rcctl enable mysqld && rcctl start mysqld
mysql_secure_installation

Step 2 – Create database and user

CREATE DATABASE appdb CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'appuse...

Install Memcached on OpenBSD 7.5

Step 1 – Install

pkg_add memcached
rcctl enable memcached && rcctl start memcached

Step 2 – Configure (/etc/memcached.conf)

-l 127.0.0.1   # listen on localhost only
-m 256         # memory (MB)
-c 1024        # max connections
-t 4           # threads

St

Install ModSecurity WAF on Apache – OpenBSD 7.5

Step 1 – Install

pkg_add ap2-mod_security2

Step 2 – Enable detection mode

cp /etc/modsecurity/modsecurity.conf-recommended /etc/modsecurity/modsecurity.conf 2>/dev/null || \
   cp /usr/share/doc/libapache2-mod-security2/examples/modsecurity.con...

Install MySQL on OpenBSD 7.5

Step 1 – Install and secure

pkg_add mariadb-server
mysql_install_db
rcctl enable mysqld && rcctl start mysqld
mysql_secure_installation

Step 2 – Connect

mysql -u root -p

Step 3 – Create database and user

CREATE DATABASE appdb CHARACTER SET utf8mb4 COLLATE utf...

Install Nginx on OpenBSD 7.5

Step 1 – Install

pkg_add nginx

Step 2 – Enable

rcctl enable nginx
rcctl start nginx

Step 3 – PF firewall

Add to /etc/pf.conf:

pass in on egress proto tcp to port { 80 443 }

pfctl -f /etc/pf.conf

Step 4 – Verify

nginx -v
ftp -o - http://localhost

C...

Install Node.js on OpenBSD 7.5

Step 1 – Install

pkg_add node

Step 2 – Verify

node --version && npm --version

Step 3 – Simple HTTP server

// app.js
const http = require('http');
http.createServer((req, res) => {
  res.writeHead(200, {'Content-Type': 'text/plain'});
  res.end('Hello from N...

Install Percona XtraDB Cluster (PXC) on OpenBSD 7.5

PXC provides synchronous multi-master MySQL replication using the Galera library.

Step 1 – Install

# PXC is primarily packaged for RHEL/Debian.
# On OpenBSD 7.5, use Percona's binary tarball:
# https://www.percona.com/downloads/Percona-XtraDB...

Install PHP-FPM on OpenBSD 7.5

Step 1 – Install

pkg_add php php-fpm
rcctl enable php83_fpm && rcctl start php83_fpm

Step 2 – Verify

php --version
php-fpm -v 2>/dev/null || php-fpm8.3 -v 2>/dev/null || php-fpm8.2 -v

Step 3 – Key pool settings (/etc/php-fpm.conf)

user  = www-data
group =...

Install PostgreSQL on OpenBSD 7.5

Step 1 – Install

pkg_add postgresql-server
su -l _postgresql -c 'initdb -D /var/postgresql/data -U postgres -A md5 -W'
rcctl enable postgresql && rcctl start postgresql

Step 2 – Connect as superuser

sudo -u postgres psql

Step 3 – Create database and user

Install Prometheus on OpenBSD 7.5

Step 1 – Install

VERSION=2.51.2
wget https://github.com/prometheus/prometheus/releases/download/v${VERSION}/prometheus-${VERSION}.linux-amd64.tar.gz
tar xvf prometheus-${VERSION}.linux-amd64.tar.gz
cp prometheus-${VERSION}.linux-amd64/prometheus /usr/local/bin/...

Install Redis on OpenBSD 7.5

Step 1 – Install

pkg_add redis
rcctl enable redis && rcctl start redis

Step 2 – Verify

redis-cli ping   # PONG

Step 3 – Bind and password (/etc/redis/redis.conf)

bind 127.0.0.1 ::1
requirepass StrongRedisPass!

Restart, then:

redis-cli -a StrongRedisPass...

Install Varnish Cache on OpenBSD 7.5

Step 1 – Install

pkgin install varnish 2>/dev/null || pkg_add varnish

Step 2 – Basic /etc/varnish/default.vcl

vcl 4.1;

backend default {
    .host = "127.0.0.1";
    .port = "8080";
    .connect_timeout = 5s;
    .first_byte_timeout = 90s;
}

sub vcl_re...

Install WordPress on OpenBSD 7.5 (Nginx + PHP-FPM + MySQL)

Prerequisites

• Nginx · PHP-FPM · MySQL

Step 1 – Database

CREATE DATABASE wordpress CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'wpuser'@'localhost' IDENTIFIED BY 'WPStrongPass!';
GRANT ALL PRIVILEGES ON wordp...

Integrate PHP-FPM with Nginx on OpenBSD 7.5

Prerequisites

PHP-FPM installed and running. See PHP-FPM install guide.

Socket path: /var/run/php-fpm.sock

Step 1 – Nginx server block

server {
    listen 80;
    server_name example.com;
    root /var/www/example.com/html;
    index index.php...

MariaDB Backup and Restore on OpenBSD 7.5

mariadb-dump (logical)

mariadb-dump -u root -p appdb > /backups/appdb_$(date +%F).sql
mariadb-dump -u root -p --all-databases --single-transaction > /backups/all_$(date +%F).sql

Restore

mariadb -u root -p appdb < /backups/appdb_2026-05-07.sql

Maria

MariaDB Galera Cluster on OpenBSD 7.5

Nodes: 192.168.1.10 · 192.168.1.11 · 192.168.1.12

Step 1 – Install Galera on all nodes

# Install mariadb-galera for OpenBSD 7.5

Step 2 – Configure Node 1 (/etc/mysql/conf.d/galera.cnf)

[mysqld]
binlog_format            = ROW
default-storage-engi...

Memcached Distributed Setup on OpenBSD 7.5

Memcached itself has no cluster mode — distribution is handled by the client using consistent hashing.

Run multiple instances

memcached -d -l 192.168.1.10 -p 11211 -m 512 -t 4 -u memcache
memcached -d -l 192.168.1.11 -p 11211 -m 512 -t 4 -u memcache

Monitor Percona XtraDB Cluster on OpenBSD 7.5

Key wsrep variables

SHOW STATUS LIKE 'wsrep_%';

MySQL Backup and Restore on OpenBSD 7.5

mysqldump

# Single database
mysqldump -u root -p appdb > /backups/appdb_$(date +%F).sql

# All databases
mysqldump -u root -p --all-databases > /backups/all_$(date +%F).sql

# Compressed
mysqldump -u root -p appdb | gzip > /backups/appdb_$(date +%F).sql.gz...

MySQL Primary-Replica Replication on OpenBSD 7.5

Primary: 192.168.1.10   Replica: 192.168.1.11

Primary – my.cnf

[mysqld]
server-id   = 1
log_bin     = /var/log/mysql/mysql-bin
binlog_format = ROW
binlog_expire_logs_seconds = 604800

CREATE USER 'replicator'@'192.168.1.11' IDENTIFIED WITH...

Nginx Load Balancing on OpenBSD 7.5

Round-robin (default)

upstream myapp {
    server 192.168.1.10:8080;
    server 192.168.1.11:8080;
    server 192.168.1.12:8080;
}
server {
    listen 80;
    server_name lb.example.com;
    location / { proxy_pass http://myapp; }
}

Least connections

upstr...

Nginx Rate Limiting on OpenBSD 7.5

Define zones in http block

http {
    limit_req_zone $binary_remote_addr zone=api:10m     rate=10r/s;
    limit_req_zone $binary_remote_addr zone=login:10m   rate=5r/m;
}

Apply to locations

location /api/ {
    limit_req zone=api burst=20 nodelay;
    lim...