Secure remote access with Tailscale and Caddy on NixOS

I’ll physically be away from my network for a while, so I figured it’s time for a more robust remote access solution. Previously I was using wg-easy, but this had it’s disadvantages. The native Wireguard app on Android was a total battery sponge, and configuration tended to be convaluted. I considered mesh tools like Nebula but I finally settled on the popular choice of Tailscale due to it’s generous pricing (free) and relatively simple configuration. I had a few goals in mind: ...

January 28, 2025

NixOS inside LXC (without flakes) made easy

LXCs are great, but LXC templates that are booted and instantly accessible over SSH and running services are better. The best part is that it’s done without iterative, stateful tools like Ansible or needing to provision before running a deployment tool like Colmena. It just works. lxc.nix is where all the nitty-gritty is. A sample here is provided, and any other nix files need to be imported here to be baked into the tarball. ...

June 24, 2024