Hosting DokuWiki on FreeBSD with Bastille, nginx, and Caddy

Some services do not need PostgreSQL, Redis, an object store, three containers, and a deployment manifest long enough to qualify as literature. Sometimes I need a wiki: a place for notes, runbooks, snippets, and the sort of documentation that is useful precisely because it is not public. DokuWiki fits that job unusually well. It stores pages as plain text files, needs no database, has a mature ACL system, and is available as a regular FreeBSD package. Put it in a Bastille jail and the entire application becomes a small, inspectable service: nginx, PHP-FPM, and a directory tree I can back up with ordinary ZFS tooling. This follows the same pattern as my blog infrastructure and CryptPad deployment: the application lives in its own jail, while a separate Caddy jail is the only public web frontend. If the networking below feels too compressed, the FreeBSD Foundationals article on Jails covers VNET, epairs, bridges, and the isolation model in detail. The Shape of the Setup Creating the…