dihutenosa@piefed.social

Manually set up Wireguard, here.

My current router is an ancient laptop running NixOS. Ethernet in via the Ethernet port, and out via a USB converter. It probably could serve as a WiFi AP too, but currently I have a dumb OpenWRT in bridge mode for that.

The same laptop also selfhosts Prosody, coturn, LiveKit and stuff.

I don’t really see how a proper router would be better than that.

• authoritative DNS for my domain
• email (Postfix, Dovecot, rspamd)
• Matrix chat and video conferencing (nginx, Synapse, MAS, Livekit, coturn, Postgres)
• Prosody elsewhere for failover if international links go down
• Nextcloud
• offsite backups for important data, not the whole OS (rsync)
• QR scanner on a webpage, for transferring complex passwords locally
• Syncthing
• Offsite monitoring (Prometheus, Grafana, AlertManager) - amusingly, on an old ex-Android phone running PostmarketOS (a variant of Alpine). Eats less than a watt of power.
• Wireguard to hook up the monitoring with minimum fuss

I’d use nginx and https://git-scm.com/docs/git-http-backend

Here’s a tip: it’s one less firewall to manage, if you make your server be the router, and have your Cudy do only WiFi in dumb AP mode. Or, if the server is in a good enough location, install ´haveged´ and have it serve WiFi too.

Is there a particular reason you’re not selfhosting Wireguard, instead relying on a commercial provider? I’m running this thing on my phone, via F-Droid: https://apt.izzysoft.de/fdroid/index/apk/com.zaneschepke.wireguardautotunnel (it eats battery if you enable keepalive, but you normally don’t need keepalive, so leave it unset).

Kiwix has the whole Gutenberg as a downloadable dataset. Search is basic, tho.