Linux hobbyist, Machinist and tinkerer

Public Key 405B46E81DCCDB2B310DEF0DA5F0B998E8AC3752

  • 17 Posts
  • 199 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle

  • At times i have felt that my distro was so not worth the flak.

    But the thing that keeps me on it is i write it once and never half to dick with it again.

    NixOS is really powerful, but the learning curve will push you to the edge!

    I currently self host alot of stuff on my server which runs NixOS, theres some services that are as simple as ollama.service = true;

    And others that you spend hours cussing at. But i feel the declarative nature is what makes switching to any other distro feel so unintuitive.

    My linux journey had been,

    Manjaro > ubuntu > arch > fedora > silverblue > opensuse tumbleweed > gentoo > nixos > opensuse tumbleweed > nixos.

    I kept coming back to nix because i wrote what i wanted it to do and it did it that way every time. Its been a godsend for ZFS, although its not super bad to use ZFS on debian just mostly time consuming. The fact i dont half to worry about a update breaking DKMS and making my filesystem not work. I SWEAR SUN IF YOU COULD HAVE JUST DONE THE GPL INSTEAD OF CDL!!!

    I have recently been exploring Guix, purely because of the NixOS drama. But i think nix is my main server OS


















  • Yeah is guide is pretty useful! i went with setting up wireguard instead of openvpn. For a while now ive been self hosting alot of my stuff, SearXNG with gluetun tunneling, minecraft server for me and the boys and a Samba Share instead of paying for some dopey cloud storage. Ive gotten ZFS running in a 1tb z1 pool for my containers and plan to add a 10tb Z2 pool for long term storage and backups. i chose to do it in NixOS instead of debian or ubuntu, just because im a little bit of a nut for immutability.

    its actually kinda funny i just left a post asking for help setting up wiregaurd server on c/selfhosted and referenced louis’s guide! Also i gotta add thats EPIC you got 10gbps internet, i went with a glinet flint 2 for my router. Because it runs openwrt under the hood, i personally like openwrt alot. there are people that swear by pfsense or opensense because of the bsd network stack, is very well maintained and secure as alot of commercial products like switches and firewalls run pfsense under the hood. for security and vlans pfsense would probably be better from what i heard. But openwrt works pretty well aswell, and i ended up just going with the flint 2 because it has 2.5gb wan in and 1 2.5gb lan. which was more than enough more my measly 1-2gb internet.


  • so for example, setting 192.168.8.170 on the clients as the only allowed IP aswell as the server would do what i need? thanks for helping trying to navigate my labyrinth of networking :P

    For client example [Interface] Address = 10.0.0.3/24 ListenPort = 51820 PrivateKey = magic numbers

    [Peer] PublicKey = magic numbers

    PresharedKey = magic numbers

    AllowedIPs = 192.168.8.170 Endpoint = magic numbers"

    For server example

    peers = [

    { #friend1 publicKey = “magic numbers and letters”; allowedIPs = [ “192.168.8.170/24” ]; endpoint = “magic numbers and letters”; presharedKey = “magic numbers and letters”; persistentKeepalive = 25; }

    { # My phone publicKey = “magic numbers and letters”; allowedIPs = [ “192.168.8.170/24” ]; endpoint = “magic numbers and letters”; presharedKey = “magic numbers and letters”; persistentKeepalive = 25; }

    {# friend 2 publicKey = “magic numbers and letters”; allowedIPs = [ “192.168.8.170/24” ]; endpoint = “magic numbers and letters”; presharedKey = “magic numbers and letters”; persistentKeepalive = 25;

    } {# friend 3 publicKey = “magic numbers and letters”; allowedIPs = [ “192.168.8.170/24” ]; endpoint = “magic numbers and letters”; presharedKey = “magic numbers and letters”; persistentKeepalive = 25; }