Security

Tailscale is a modern VPN built on WireGuard with automatic mesh networking. For complete self-hosting, use Headscale—an open-source Tailscale control server implementation. UniFi Devices: If you run UniFi hardware (Dream Machine, Dream Router, etc.), install Tailscale directly on your gateway: 1 2 3 4 5 6 7 8 # Install the latest version of Tailscale on UniFi OS 2.x+ curl -sSLq https://raw.github.com/SierraSoftworks/tailscale-udm/main/install.sh | sh # Start Tailscale tailscale up # Advertise routes to your local network tailscale up --advertise-routes=10.0.0.0/24 --advertise-exit-node The installation automatically restarts after UniFi updates, runs via systemd on UniFi OS 2.x+, and supports Tailscale SSH. It works on UniFi Dream Machine, Dream Router, Cloud Key Gen 2, and similar devices. ...

A collection of resources for setting up Nix on macOS with nix-darwin and home-manager. The nix-darwin-kickstarter repository is a good starting point for macOS. Run programs without installing them with nix-shell -p cowsay. Remote Deployment: nixos-rebuild announcement Example configurations: jdheyburn/nixos-configs Great examples for: Caddy web server FreshRSS deploy-rs Tailscale integration wimpysworld/nix-config - Production-ready configuration Remote installation with nixos-anywhere: nixos-anywhere uses kexec. If kexec doesn’t work, boot with NixOS ISO instead. Wireless in initrd: Unlocking encrypted drives over WiFi ...

Kanata provides more readable keyboard remapping configurations than Karabiner-Elements. To run it automatically on macOS startup, set it up as a LaunchDaemon. Install Kanata via Homebrew: 1 brew install kanata Download and install the Karabiner VirtualHIDDevice driver. Kanata needs this to interact with macOS. Create your Kanata configuration at ~/.config/kanata/config.kbd. See the documentation for examples. Add a key combo to reload your configuration (command: lrld) to avoid manually restarting. Create two .plist files in /Library/LaunchDaemons/ to launch Kanata at startup. ...