u/xrothgarx

I was seeing a video from Wolfgang where he was explaining his homelab and how NixOS is used. I´m very inclined towards using it on my desktop computer, but I never really thought on using it at the server.

My homelab runs on a single node with Talos Linux, which is a Kubernetes distribution. Everything started quite simple, but now I have 10k lines of YAML. I use Kubernetes on my day job, but to some extend, it feels too much at my homelab. I dont want HA, scaling, and nothing like that. But I do appreciate how easy it is to drop things like gVisor and run containers with more safety, Cillium that allows me to control all the network, etc...

So now I m on this situation that I would like to have something simpler, and maybe NixOS is this solution for me since I already want to use it at my desktop, or stick with Kubernetes complexity.

If I get into NixOS my plan would be to run every service on its own user, although I think gVisor is still way more secure since it exposes just a few syscalls.

The big question for me is how to control the network how I do at Cillium where I allow only access to the internet, or a given service, or a given protocol, domain, etc... Maybe this will be a stretch.

It’s an easy build if you do it in the correct order