A story on home server security

Re:A story on home server security by 0xCMP on Sunday January 05, 2025 @10:42AM (#42602493)

Of course, that means you need to run NixOS for that to work (which I also do everywhere) and there are networking problems with Docker/Podman in NixOS you need to address yourself. Whereas Docker "runs anywhere" these days.

Worth noting the tradeoffs, but I agree using Nix for this makes life more pleasant and easy to maintain.

[ Parent | on HN ]

Re:A story on home server security by diggan on Sunday January 05, 2025 @11:12AM (#42602722)

> that means you need to run NixOS for that to work

Does it? I'm pretty sure you're able to run Nix (the package manager) on Arch Linux for example, I'm also pretty sure you can do that on things like macOS too but that I haven't tested myself.

Or maybe something regarding this has changed recently?

[ Parent | on HN ]

Re:A story on home server security by 0xCMP on Sunday January 05, 2025 @02:27PM (#42604292)

sorry, yes to build it is fine, but managing them with Nix (e.g. dealing with which ports to expose and etc like in the article) requires NixOS.

edit: I actually never checked, but I guess nothing stops home-manager or nix-darwin from working too, but I don't think either supports running containers by default. EOD all NixOS does is make a systemd service which runs `docker run ..` for you.

[ Parent | on HN ]

Re:A story on home server security by libeclipse on Sunday January 05, 2025 @12:01PM (#42603109)

You don't need NixOS to use Nix as a package manager/build system

[ Parent | on HN ]

Re:A story on home server security by brnt on Sunday January 05, 2025 @12:15PM (#42603210)

If you configure your server(s) through nix and nix containers, then even without another host OS you are basically running nix.

[ Parent | on HN ]