• 0 Posts
  • 19 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle

















  • I’m suprised nobody mentioned nebula: A scalable overlay networking tool with a focus on performance, simplicity and security.

    I’ve been running it for about two years on multiple machines and it worked flawlessly so far. Even connecting two hosts, both behind mullvad-vpn tunnels.

    The only downside is, that you have to host your own discovery server (callled “lighthouses”). One is fine, but running at least two removes the single point of failure from the network.


    • NixOS
      • disko + nixos-anywhere (automatic partitioning & remote installation of new systems)
      • stylix (system-wide theming)
      • agenix (secret management)
      • impermanence (managing persistent data)
      • nixos containers for sandboxing applications & services (using systemd-nspawn)
    • TMPFS as /
    • LUKS
      • BTRFS as /nix (might try bcachefs)
      • SWAP partition (= RAM size, to susbend to disk)
    • Greetd with TUIgreet (DM)
    • SwayFX (WM)
    • Kitty & foot (term)
    • Nushell (shell)
    • Helix (editor)
    • Firefox (browser)
    • slackhq/nebula (c.f. self-hosted tailscale, connecting my systems beyond double NATs)

    EDIT1: fix “DE” -> “DM”