• 0 Posts
  • 47 Comments
Joined 1 year ago
cake
Cake day: June 5th, 2025

help-circle






  • I’ve used Arch as my daily for so many years now, it is a little tricky moving from imperative to declarative configuration. I’m treating my NixOS machine more as long term maintenance, so I’m not using the most bleeding edge packages. You can do that though by pointing to nixos-unstable.

    I plan on using flakes for pinning and home-manager for writing ~/.config configurations, but I don’t think I really need it, more just to learn how. With home-manager, I could rebuild this machine from scratch (including individual application preferences/settings) just with the backed up configs. I can at any point rollback to any saved previous generation though, too, just by restarting the machine.

    I’ve really been impressed with it though. To the point, I will probably be moving my Arch DIY router over and converting it to NixOS.











  • As a networking guy, for homelab setups the router is not core of your network. That role falls on the switch. In a perfect world, you’d have a layer-3 switch handling traffic between segments and only send traffic to the router for egressing the network or a few other cases. But in the real world, you have to start somewhere and that’s what you did. Don’t let anyone tell you that you did it wrong. If someone can’t make things work without having the perfect equipment, its probably the wrong hobby for those people.

    Regarding network-wide adblocking, I had a squid proxy running that did this. Every machine was issued a self-signed certificate and the connections were basically MITM so I could check the calls being made. You can run into some issues with SSL-pinning in Android or things like HSTS for common websites sometimes, but overall it did function pretty well after tweaking.

    If you do decide later to replace your existing router, I’d suggest trying to build your own. My current router is a mini-PC with dual NICs running Arch configured to do packet filtering, routing, a few automations, etc. It was refurbished and cost me about $80 USD. Its a really good experience in building servers and learning how various routing protocols work.