If you’re setting up something similar and want help with anything, you can reach me via email at [email protected] or on Matrix at @jsch:matrix.org.

Network

My router is a PC Engines apu2 running OpenBSD -stable. It is also a Headscale server which facilitates easy communication between all of my hosts.

I use a TP-Link SG-108E managed switch to segregate my network into several VLANs. My access point is a Netgear R6100 running OpenWrt.

I have a 1.5 kVA APC UPS for short outages and safe shutdowns. I get a push notification via Pushover if sensorsd(8) detects an outage.

Servers

All of my servers are deployed from a Nix Flake using Colmena and backed up to Backblaze B2 using restic. SSH authentication is protected by a YubiKey using gpg-agent, and secrets are stored in Vaultwarden and accessed through rbw.

My NAS is an old ASUSTOR AS5002T running NixOS on encrypted ZFS with ephemeral root. The following services are accessed over either Cloudflare Tunnel or Tailscale:

• Calibre-Web for my ebook library (it even syncs to my Kobo!)
• Immich for my photo library
• Invidious, which I use with the Yattee client
• Jellyfin for my media library

Tailscale works great on tvOS, allowing me to watch content from Invidious and Jellyfin on my TV without exposing them to the wider Internet.

This site is hosted on a free Oracle Cloud ARM Ampere A1 VPS. This web application was written in Go and is configured with a NixOS module.

I also run a modded Minecraft server for my friends using the awesome nix-minecraft module.

Laptop

My laptop is a 14-inch MacBook Pro with M1 Max (2021) running macOS Sonoma. I use nix-darwin with home-manager to get as close to reproducibility as possible. I’ve been keeping an eye on the Asahi Linux project, which is doing excellent work bringing Linux to Apple Silicon devices. In the meantime, I have a UTM virtual machine with NixOS.

Battlestation