• 0 posts
  • 23 comments
Joined 1 year ago
Cake day: April 17th, 2025
  • I’ve been daily driving it for 8months or so and have no interest in changing anytime soon. My experience has been really positive, and I agree it feels rock solid with the immutable base.

    The only real issue I’ve had was that the btrfs partition sometimes shits itself and requires some CLI commands in emergency mode to fix it. Bizzare you had the issue with using integrated drivers, it’s been fine for me on my 4080 and IIRC there was a widget for setting preferred GPU in the taskbar?

  • I run nixos, so my entire homelab servers setup is stored in my github. I can rebuild a server and restore backups from that (and sops keys). I significantly prefer this to having to remember and note a huge bunch of things to setup a computer - this way a rebuild on new oc is only a few hours tops

  • Depends on the circumstances tbh. Things like sops do load the secret unencrypted on the machine (with perms but still unencrypted. For remote VPS encrypted at rest is probably better. K8S has secret management but there unencrypted too.

    Another alternative could be using Doppler secrets managment platform, I used it for a while

  • I think it’s overkill for homelab and over complex/additional failure points.

    I use sops encrypted, published in my public git. When I apply my nix config, they are pulled and unencrypted on apply on the local machine.

    Keeps it as simple as I can think of, with few moving parts.