Lots of changes to the website

content/posts/the-hardware.md

@@ -13,10 +13,10 @@ actually in the rack, why those machines, and what each one does.
 ## The Firewall: SuperMicro 1U
 
 The firewall is a SuperMicro 1U server with a Xeon E3-1230v2 and 16GB ECC RAM. This runs
-OpenBSD and handles everything at the network edge:
+OPNsense (FreeBSD-based) and handles everything at the network edge:
 
 - **pf** — stateful packet filtering, VLAN routing
-- **relayd** — reverse proxy, TLS termination for external services
+- **nginx** — reverse proxy, TLS termination for external services
 - **WireGuard** — VPN for remote access
 - **unbound** — recursive DNS resolver for internal clients
 - **dhcpd** — DHCP for all VLANs
@@ -32,7 +32,7 @@ network segment.
 The R720 is the workhorse. Dual Xeon E5-2600 series processors, 64GB ECC RAM, a few SSDs
 for the OS and data volumes.
 
-This runs OpenBSD and hosts:
+This runs FreeBSD and hosts:
 
 - **httpd** — web server for this site
 - **Gitea** — self-hosted git
@@ -51,18 +51,18 @@ on a home circuit without thinking about it.
 ## The Secondary Server: Dell R710
 
 The R710 is older — Xeon 5500/5600 series — but has more RAM slots, currently at 48GB.
-It runs a mix of OpenBSD base with some Linux VMs managed by `vmm(4)`.
+It runs FreeBSD with Linux VMs managed by `bhyve(8)`.
 
 Primary roles:
 
 - **nsd** — authoritative DNS for ridgwaysystems.org zones
-- **Linux VMs** — game servers (Minecraft, Valheim, etc.), running in `vmm(4)`
+- **Linux VMs** — game servers (Minecraft, Valheim, etc.), running in `bhyve(8)`
 - **Jellyfin** — media server
-- **Backup target** — receiving rsync backups from srv01
+- **Backup target** — receiving ZFS send/recv and rsync backups from srv01
 
 The R710 is even louder than the R720 under load. Old server hardware wasn't designed with
-home environments in mind. ILO (Dell iDRAC) makes remote management workable — I rarely
-need to touch it physically.
+home environments in mind. iDRAC makes remote management workable — I rarely need to touch
+it physically.
 
 ## The Desktop: Daily Driver and Ansible Control Node
 
@@ -95,4 +95,4 @@ data. ECC doesn't eliminate all failure modes, but it eliminates the commonest o
 
 Next up: the pf configuration and VLAN setup. This is where most of the interesting work
 happens — separating untrusted IoT devices from servers, routing WireGuard traffic, and
-setting up relayd to proxy external services.
+setting up the reverse proxy to forward external services.