• 3 Posts
  • 141 Comments
Joined 2 years ago
cake
Cake day: April 27th, 2024

help-circle


  • Zero.

    About 35 NixOS VMs though, each running either a single service (e.g. Paperless) or a suite (Sonarr and so on plus NZBGet, VPN,…).

    There’s additionally a couple of client VMs. All of those distribute over 3 Proxmox hosts accessing the same iSCSI target for VM storage.

    SSL and WireGuard are terminated at a physical firewall box running OpnSense, so with very few exceptions, the VMs do not handle any complicated network setup.

    A lot of those VMs have zero state, those that do have backup of just that state automated to the NAS (simply via rsync) and from there everything is backed up again through borg to an external storage box.

    In the stateless case, deploying a new VM is a single command; in the stateful case, same command, wait for it to come up, SSH in (keys are part of the VM images), run restore-<whatever>.

    On an average day, I spend 0 minutes managing the homelab.





  • Sorry, unfortunately can’t help you there. My matrix server is not federated, I remember back then I created an account on matrix.org specifically to read these. But maybe they got deleted in the meantime?

    Anyways, I have been really happy with continuwuity, to the point that up until now, I haven’t even looked at tuwunel again. The maintainers of continuwuity seem really nice and engaged, and both from a usage and stability point of view, as well as for the actually surprisingly fast release cycle, I have no complaints. I found and fixed a bug a couple weeks ago, and the dev process was also very friendly and relaxed.

    In short: while I don’t know how things are on the tuwunel side, I’m very happy to have gone with continuwuity and have high hopes for the future of the project.












  • Planning to host a Nix caching server, and have CI build all package and NixOS outputs on every push to git, then in turn pushing the output artifacts to the cache. Would save me a good chunk of time when tinkering with VMs that haven’t seen manual updates in a while.

    Only thing is, I’m not sure how to approach building and caching NixOS configs that receive agenix secrets in their input. Obviously those should not be cached…



  • More like: paying someone to maintain the hardware.

    Anyways.

    Just FYI, your mails with a provider like Proton are not E2E encrypted unless you exclusively wrote with other Proton customers (in which case I assume they are. No idea). Otherwise it’s just encrypted at rest.

    I dint really see the benefit over doing it completely yourself, not even offering metadata to a provider, and also having encryption at rest, while maintaining full compatibility with mail clients 🤔