Rebuilding the homelab on NixOS
The whole home server stack now runs on declarative NixOS: one flake, two machines, reproducible from a git repository. Impermanence wipes the root filesystem on every boot; only explicitly persisted state survives.
Self-hosting files with Nextcloud
File sync, calendars and notes now live at home on a small mini-PC, behind a Raspberry Pi acting as reverse proxy and DNS resolver. Notes sync to Obsidian over WebDAV.
WireGuard everywhere
Remote access to the home network goes through WireGuard on the router; selected outbound traffic is tunnelled through a VPN provider with a fail-closed policy-routing setup.