I want this for cleaning my house. When did I last clean my dish washer, the lamps etc. It’s on my TODO to create when I have time.

I was considering putting the secrets somewhere not in /etc/nixos/ and just point to them. Then I could push my nix files without worry. My plan was to use my other server as a remote with just git and ssh, but that server is not responding and is ~6 by car away from me (I don’t own a car). It will be traveling here soon so I can configure it and send it back though.

Thanks for the link to sops-nix, I will check it out. As you said, NixOS is great when you have it running. I can’t see myself going back to debian now.

I used it via Kagi. I’m not sure how they handle it on their end but I can swich between any model that is included in my subscription.

I suggest giving NixOS a try. I recommend it because it makes it easy to add or remove stuff. Changing names on containers, removing installed application etc is just changing your configuration. And if you mess something up and it does not boot, you can just boot from the last working configuration.

Containers are also really easy to manage. Convert a docker run command with https://www.composerize.com/ and then use https://github.com/aksiksi/compose2nix to convert the yaml file to a nix file. Configure as needed.

I used Kimi K2 to start learning the Nix language. It really cut down time when trying to understand what I did wrong when switching configurations threw errors.

https://n8n.io/

It is an automation platform with a selfhosted tier.

Where do you push to? I have some secrets in my nix files (passwords). While I will get around to move them away from my nix files soon^TM, I don’t want to push those to a public repo.

In only have one server with NixOS. I don’t use flakes, just plain nix files. It still works great as documentation.

The only thing it is missing is why something is setup in a certain way.

I have similar stats on my server. I have ~40 containers running (some are duplicate because I am to lazy to combine all PSQL servers). And since I am the only user, most of them are idle for a lot of the time.

1% CPU usages, 50% RAM usage. That checks out.

First time I hear about Resilio. Is it selfhosted?

I have used KeePass for 10+ years and used Android and Windows when I first set it up. Now I need it to work on iOS, Android, Window and Linux and moving away from KeePass was not an option I wanted to consider.

My solution is to use KeePassXC on Windows/Linux¹, KeePassDX on Android and Strongbox on iOS. To sync the file between all units, I use Syncthing (MöbiusSync on iOS). I have a server always online running syncthing to make sure that at least on node has the latest version.

The only problem I have with this setup is that Strongbox does not auto update, I have to select open existing file and select the same kdbx file (and Strongbox will update the vault etc). Saving changes does not seem to be a problem but I usually do a manual scan in MöbiusSync to make sure updates are pushed.

[1] The reason I use KeePassXC over vanilla KeePass is because the devs from KeePassXC and Strongbox communicate to make sure their applications are compatible. A file created with one works with the other seamlessly.

Luna looks promising. Haven’t tried it out yet though.

Have a look at tasks md. https://github.com/BaldissaraMatheus/Tasks.md

I tried to set it up the other day and failed as well. Looking at their docker-compose examples for reverse proxy, there are a lot of environment variables not included in their original example. After adding all those variables, the container started with a message about first registration.

I haven’t tested more than that yet.

EDIT: Added it to my reverse proxy and was able to create the first account via Element.

There is not alternative that is selfhosted to my knowledge. There is PushBullet with a free tier that allows for sending files. You could also use Discord and send messages via their API, and I assume that Matrix has something similar (but I have not looked).

You could also upload them to something else (Paperless or some web/file server) and send a link in your notification. A link can be displayed as a button with actions tag.

Added to my Glance page. :-)

it’s not like I have thousands of containers running

I feel you. I have ~20 container files (some are multiple containers in one file, e.g. db and web server) and I seldom have to do changes to them. Once properly configured, I don’t really have to do anything.

Do you want to expose port 80/443 and set up a reverse proxy or do you want to use a VPN tunnel? You could just use SSH to port 80 and 443 like so: ssh -L 80:<local-server-ip>:80 -L 443:<local-server-ip>:443 <username>@<domain>

I expose port 80/443 and use Caddy as a reverse proxy together with Authelia to protect anything that I deem needs an extra layer of security. I followed this guide: https://caddy.community/t/securing-web-apps-with-caddy-and-authelia-in-docker-compose-an-opinionated-practical-and-minimal-production-ready-login-portal-guide/20465

Once setup, it is easy to remove or add a backend to Caddy and Authelia. This way does mean that you sometimes need to log in twice, but that is a small price to pay if your backend app does not support SSO (like n8n community edition).

A very simple way to set up file access is to use SSHFS, mounting the drive via SFTP. It may not be as fast as other protocols but it is simple and requires minimal setup on your server.

https://github.com/winfsp/sshfs-win
https://github.com/libfuse/sshfs