Self-hosted,
on my own hardware.

A small personal site running on a machine at home — rootless containers, automatic TLS, no cloud dependency.

Serving from furiosa

Services

Network

LAN only

Omada controller — access points, switching, and client inventory.

Add a service

Containers join the caddy-net network and are reached by name. No published ports; Caddy is the only door.

About

Everything here runs as rootless podman Quadlets on Arch Linux, fronted by Caddy — which holds ports 80/443 as an unprivileged user and issues its own certificates.

TLS is a Let’s Encrypt wildcard for mrfy.io and *.mrfy.io, validated via the DNS-01 challenge. The wildcard is the reason these names work even when traffic doesn’t pass through a CDN.