dihutenosa

I write my NixOS configs in my PC, commit to the repo, then push it to the server. Then SSH in, and apply it. Or more likely, MOSH in.

What’s ASD?

Absolutely amazing!

I’m doing that. Works fine. There’s an article in PMOS wiki about limiting the max battery voltage.

Syncthing? git-annex?

Manually set up Wireguard, here.

My current router is an ancient laptop running NixOS. Ethernet in via the Ethernet port, and out via a USB converter. It probably could serve as a WiFi AP too, but currently I have a dumb OpenWRT in bridge mode for that.

The same laptop also selfhosts Prosody, coturn, LiveKit and stuff.

I don’t really see how a proper router would be better than that.

• authoritative DNS for my domain
• email (Postfix, Dovecot, rspamd)
• endlessh
• Matrix chat and video conferencing (nginx, Synapse, MAS, Livekit, coturn, Postgres)
• Prosody elsewhere for failover if international links go down
• Nextcloud
• offsite backups for important data, not the whole OS (rsync)
• QR scanner on a webpage, for transferring complex passwords locally
• Syncthing
• Offsite monitoring (Prometheus, Grafana, AlertManager) - amusingly, on an old ex-Android phone running PostmarketOS (a variant of Alpine). Eats less than a watt of power.
• Wireguard to hook up the monitoring with minimum fuss

I’d use nginx and https://git-scm.com/docs/git-http-backend

Here’s a tip: it’s one less firewall to manage, if you make your server be the router, and have your Cudy do only WiFi in dumb AP mode. Or, if the server is in a good enough location, install ´haveged´ and have it serve WiFi too.

Is there a particular reason you’re not selfhosting Wireguard, instead relying on a commercial provider? I’m running this thing on my phone, via F-Droid: https://apt.izzysoft.de/fdroid/index/apk/com.zaneschepke.wireguardautotunnel (it eats battery if you enable keepalive, but you normally don’t need keepalive, so leave it unset).

Kiwix has the whole Gutenberg as a downloadable dataset. Search is basic, tho.

Get an old Android phone, possibly with a dead screen (bootloader must be unlocked). Flash PostmarketOS on it, or (if not supported) Termux. Its idle usage (with WiFi on, screen off) may be considerably less than 1w. It’ll have considerable amounts of CPU cores and RAM, more than a cheap VPS.

I don’t trust my VPS with access to my backup box, so I pull.

You’ll need a public IP. CGNAT won’t do, unless you’ll also add Tailscale (or such) in all your client devices (which might actually be OK).

Grab an old laptop from a junk heap. Ask around for discarded computers. Possibly get an old dead Android (possibly with a broken if barely functional screen) and install Termux. Buying stuff is not green. A laptop with a 5-second battery life, completely broken screen and nonfunctional keyboard will be perfectly good for self-hosting - temporarily plug in an external screen + keyboard, until you get SSH up and running. The rest of access will happen over SSH anyway.

Install your favorite Linux distro (I like NixOS. Debian would be a good basic yet powerful choice).

Set up a webserver (nginx is a solid choice). Serve some static files in LAN.
Make your webserver accessible to the internet. Get a TLS certificate for it, for free, from Letsencrypt. Host a blog. Set up Vaultwarden and import existing passwords into it.

At this moment, your possibilities widen up - many, many services are commonly set up behind a reverse proxy (nginx the webserver is going to decrypt the TLS, then proxy the plaintext connection to your services, so your actual service doesn’t need the hassle of TLS encryption). For example Nextcloud.

Set up a Snikket server and install Snikket app in your smartphone (Dino works well on Linux). Tell your significant other, or family, or the closest friend that this is a fallback communication channel in case your main one ever goes down. Set up a STUN/TURN server and start video calling each other.

Email is a hassle. I self-host it, along with an authoritative DNS server and several other things, but it’s not for the faint of the heart.

I recently migrated my Synapse to MAS.
The next night, I dreamed that my sleep is now modern, extensible, secure, and uses XML.

set up ULA so you can access your local devices if the internet goes down

your router should retain its address even if the external connection goes down.

DHCPv6 is not well supported

Androids get SLAAC, everybody else can have a nice, readable, stable, firewall-openable suffix.

Nothing, mostly. Will use point-to-point Wireguard once I get around to setting up Prometheus ingestion.

What do you need a VPN for?

local sysadmin cosblay group

made my day. So apt.