<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Homelab on Pink Noise</title><link>https://rustikus.codeberg.page/tags/homelab/</link><description>Recent content in Homelab on Pink Noise</description><generator>Hugo -- 0.163.3</generator><language>en-us</language><lastBuildDate>Sun, 22 Feb 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://rustikus.codeberg.page/tags/homelab/index.xml" rel="self" type="application/rss+xml"/><item><title>Quicktip: Blocking LG WebOS Ads</title><link>https://rustikus.codeberg.page/tech/blocking-lg-webos-ads-and-tracking/</link><pubDate>Sun, 22 Feb 2026 00:00:00 +0000</pubDate><guid>https://rustikus.codeberg.page/tech/blocking-lg-webos-ads-and-tracking/</guid><description>&lt;p&gt;LG WebOS TVs are notorious for phoning home &amp;ndash; ads on the home screen, tracking via ACR (automatic content recognition), and telemetry across 1,700+ domains including &lt;code&gt;alphonso.tv&lt;/code&gt;, &lt;code&gt;lgsmartad.com&lt;/code&gt;, and various &lt;code&gt;lge.com&lt;/code&gt; subdomains. HaGeZi maintains a dedicated &lt;a href="https://raw.githubusercontent.com/hagezi/dns-blocklists/main/domains/native.lgwebos.txt"&gt;LG WebOS DNS blocklist&lt;/a&gt; for all of these that you can add to your DNS blocker of choice.&lt;/p&gt;
&lt;p&gt;One domain worth blocking separately is &lt;code&gt;snu.lge.com&lt;/code&gt; &amp;ndash; this is responsible for the firmware update notification popups. Blocking it stops the TV from nagging you to update, which is useful if you want to stay on a specific firmware version.&lt;/p&gt;</description></item><item><title>Quicktip: WebOS Homebrew Apps for LG TVs</title><link>https://rustikus.codeberg.page/tech/webos-homebrew-apps-for-lg-tvs/</link><pubDate>Sun, 22 Feb 2026 00:00:00 +0000</pubDate><guid>https://rustikus.codeberg.page/tech/webos-homebrew-apps-for-lg-tvs/</guid><description>&lt;p&gt;LG TVs let you enable a &lt;a href="https://webostv.developer.lge.com/develop/getting-started/developer-mode-app"&gt;Developer Mode&lt;/a&gt; through the LG Content Store, which allows sideloading apps via &lt;code&gt;ares-install&lt;/code&gt;. Two apps worth installing:&lt;/p&gt;
&lt;p&gt;&lt;a href="https://github.com/NicholasBly/youtube-webos"&gt;youtube-webos&lt;/a&gt; is an actively maintained fork that replaces the stock YouTube app with one that blocks ads, integrates &lt;a href="https://sponsor.ajay.app/"&gt;SponsorBlock&lt;/a&gt;, and adds features like Return YouTube Dislike, force max quality, and customizable themes. The official YouTube app needs to be uninstalled first.&lt;/p&gt;
&lt;p&gt;&lt;a href="https://github.com/Moonfin-Client/WebOS"&gt;Moonfin&lt;/a&gt; is an enhanced Jellyfin client built with LG&amp;rsquo;s Enact framework. It supports multi-server unified libraries, Jellyseerr integration for requesting content, and hardware-accelerated playback through the native webOS media pipeline.&lt;/p&gt;</description></item><item><title>Tailscale Setup Guide: Self-Hosted and UniFi Integration</title><link>https://rustikus.codeberg.page/tech/tailscale-setup-guide/</link><pubDate>Sat, 24 Jan 2026 00:00:00 +0000</pubDate><guid>https://rustikus.codeberg.page/tech/tailscale-setup-guide/</guid><description>&lt;p&gt;Tailscale is a modern VPN built on WireGuard with automatic mesh networking. For complete self-hosting, use Headscale—an open-source Tailscale control server implementation.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;UniFi Devices&lt;/strong&gt;: If you run UniFi hardware (Dream Machine, Dream Router, etc.), install Tailscale directly on your gateway:&lt;/p&gt;
&lt;div class="highlight"&gt;&lt;div class="chroma"&gt;
&lt;table class="lntable"&gt;&lt;tr&gt;&lt;td class="lntd"&gt;
&lt;pre tabindex="0" class="chroma"&gt;&lt;code&gt;&lt;span class="lnt"&gt;1
&lt;/span&gt;&lt;span class="lnt"&gt;2
&lt;/span&gt;&lt;span class="lnt"&gt;3
&lt;/span&gt;&lt;span class="lnt"&gt;4
&lt;/span&gt;&lt;span class="lnt"&gt;5
&lt;/span&gt;&lt;span class="lnt"&gt;6
&lt;/span&gt;&lt;span class="lnt"&gt;7
&lt;/span&gt;&lt;span class="lnt"&gt;8
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/td&gt;
&lt;td class="lntd"&gt;
&lt;pre tabindex="0" class="chroma"&gt;&lt;code class="language-bash" data-lang="bash"&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="c1"&gt;# Install the latest version of Tailscale on UniFi OS 2.x+&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;curl -sSLq https://raw.github.com/SierraSoftworks/tailscale-udm/main/install.sh &lt;span class="p"&gt;|&lt;/span&gt; sh
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="c1"&gt;# Start Tailscale&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;tailscale up
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;&lt;span class="c1"&gt;# Advertise routes to your local network&lt;/span&gt;
&lt;/span&gt;&lt;/span&gt;&lt;span class="line"&gt;&lt;span class="cl"&gt;tailscale up --advertise-routes&lt;span class="o"&gt;=&lt;/span&gt;10.0.0.0/24 --advertise-exit-node
&lt;/span&gt;&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;&lt;/td&gt;&lt;/tr&gt;&lt;/table&gt;
&lt;/div&gt;
&lt;/div&gt;&lt;p&gt;The installation automatically restarts after UniFi updates, runs via systemd on UniFi OS 2.x+, and supports Tailscale SSH. It works on UniFi Dream Machine, Dream Router, Cloud Key Gen 2, and similar devices.&lt;/p&gt;</description></item><item><title>Quicktip: Bypass Tailscale Routing for Local LAN</title><link>https://rustikus.codeberg.page/tech/bypass-tailscale-routing-for-local-lan/</link><pubDate>Thu, 22 Jan 2026 00:00:00 +0000</pubDate><guid>https://rustikus.codeberg.page/tech/bypass-tailscale-routing-for-local-lan/</guid><description>&lt;p&gt;When using Tailscale with Magic DNS enabled, hostname resolution always routes through Tailscale—even when you&amp;rsquo;re on your home network. This adds unnecessary latency for local connections. The issue is documented in &lt;a href="https://github.com/tailscale/tailscale/issues/1227"&gt;GitHub issue #1227&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;A workaround is to use split DNS with a custom domain. Configure your local router with local DNS entries and set up public DNS entries that point to Tailscale IPs. When you&amp;rsquo;re at home, your devices use the router&amp;rsquo;s DNS. When away, they use public DNS.&lt;/p&gt;</description></item><item><title>Nix Setup on macOS: An Overview</title><link>https://rustikus.codeberg.page/tech/nix-setup-on-macos-overview/</link><pubDate>Wed, 14 Jan 2026 00:00:00 +0000</pubDate><guid>https://rustikus.codeberg.page/tech/nix-setup-on-macos-overview/</guid><description>&lt;p&gt;A collection of resources for setting up Nix on macOS with nix-darwin and home-manager.&lt;/p&gt;
&lt;p&gt;The &lt;strong&gt;&lt;a href="https://github.com/ryan4yin/nix-darwin-kickstarter"&gt;nix-darwin-kickstarter&lt;/a&gt;&lt;/strong&gt; repository is a good starting point for macOS.&lt;/p&gt;
&lt;p&gt;Run programs without installing them with &lt;code&gt;nix-shell -p cowsay&lt;/code&gt;.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Remote Deployment&lt;/strong&gt;: &lt;a href="https://www.haskellforall.com/2023/01/announcing-nixos-rebuild-new-deployment.html"&gt;nixos-rebuild announcement&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Example configurations&lt;/strong&gt;:&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;&lt;a href="https://github.com/jdheyburn/nixos-configs/tree/main"&gt;jdheyburn/nixos-configs&lt;/a&gt;&lt;/strong&gt;&lt;br&gt;
Great examples for:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;
&lt;p&gt;Caddy web server&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;FreshRSS&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;deploy-rs&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;Tailscale integration&lt;/p&gt;
&lt;/li&gt;
&lt;li&gt;
&lt;p&gt;&lt;strong&gt;&lt;a href="https://github.com/wimpysworld/nix-config"&gt;wimpysworld/nix-config&lt;/a&gt;&lt;/strong&gt; - Production-ready configuration&lt;/p&gt;
&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Remote installation with nixos-anywhere&lt;/strong&gt;: &lt;a href="https://github.com/nix-community/nixos-anywhere"&gt;nixos-anywhere&lt;/a&gt; uses kexec. If kexec doesn&amp;rsquo;t work, &lt;a href="https://github.com/nix-community/nixos-anywhere/blob/main/docs/howtos/no-os.md"&gt;boot with NixOS ISO instead&lt;/a&gt;.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Wireless in initrd&lt;/strong&gt;: &lt;a href="https://discourse.nixos.org/t/wireless-connection-within-initrd/38317/12"&gt;Unlocking encrypted drives over WiFi&lt;/a&gt;&lt;/p&gt;</description></item></channel></rss>