Comment

I went this route from the start and love it. In case you need some resources:

VimJoyer is excellent: www.youtube.com/watch?v=a67Sv4Mbxmc
Do secrets using SOPS: www.youtube.com/watch?v=G5f6GC7SnhU
NixOS and Restic are an amazing combination, full backups in 20 lines of config. This article was my best find for this: francis.begyn.be/blog/nixos-restic-backups . Tip: you can easily write systemd services to trigger each software’s preferred backup strategy and simply schedule them to run before the Restic backup - I game them all copy the backups to one folder that then Restic backs up, works great for me!

Hope this helps a bit. I found the effort to be very worth it, but took me almost half a year to get comfortable with it.

Sort:hotnew top

Kushan@lemmy.world ⁨5⁩ ⁨days⁩ ago
Another vote for restic, best backup software I’ve ever used.

source
mat@linux.community ⁨5⁩ ⁨days⁩ ago
Thank you! It definitely does, I will be using that Restic article for sure! I actually use NixOS on my main laptop, which I found via Vimjoyer’s videos. It’s great, though I wish documentation for more advanced usage was more readily available. I started making the server, currently my biggest roadblock is testing the infrastructure without going live (I made the flake generate a VM for now but it takes a long time to build it every edit and I can’t even get ssh working) and figuring out how I’ll eventually install it with minimal downtime.

source
- Byter@lemmy.one ⁨5⁩ ⁨days⁩ ago
  On the topic of build times, it took me too long to learn that nixos-rebuild supports remote build workers and targets.
  
  For example, if I am editing on my laptop, want to build on my desktop, and apply the build to my file server, then I’d run…
  
  me@laptop$ nixos-rebuild \ --flake ~/wherever-it-lives \ --build-host desktop \ --target-host file-server \ --use-remote-sudo
  
  The host names should match the name of the nixosConfiguration output from your flake. If they don’t I think you can specify like, –target-host .#some-machine
  
  Remote sudo avoids having to SSH as root.
  
  Bonus tip: Having Tailscale on every machine makes this work reliably from anywhere, network speed as the limit.
  
  source