• 0 Posts
  • 11 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle


  • I’m using rustic, a lock-free rust-written drop-in-replacement of restic, which (I’m referring to restic and therefore in extension to rustic) supports always-encrypted, deduplicating, compressed and easy backups without you needing to worry about whether to do a full- or incremental-backup.

    All my machines run hourly backups of all mounted partitions to an append-only repo at borgbase. I have a file with ignore pattern globs to skip unwanted files and dirs (i.e.: **/.cache).

    While I think borgbase is ok, ther’re just using hetzner storage boxes in the background, which are cheaper if you use them directly. I’m thinking of migrating my backups to a handfull of homelabs from trusted friends and family instead.

    The backups have a randomized delay of 5m and typically take about 8-9s each (unless big new files need to be uploaded). They are triggered by persistent systemd-timers.

    The backups have been running across my laptop, pc and server for about 6 months now and I’m at ~380 GiB storage usage total.

    I’ve mounted backup snapshots on multiple occasions already to either get an old version of a file, or restore it entirely.

    There is a tool called redu which is like ncdu but works on restic/rustic repos. This makes it easy to identify which files blow up your backup size.



  • If you connect to the network and open firefox, it will display a toast to open the corresponding captive portals page. You can then login through that. Given that your VPN isn’t blocking unencrypted connections etc.

    Extrapolation of partial knowledge warning

    I assume the network advertises a captive portals url and identifies you based on your MAC address.

    The config is server-side (router).







    • NixOS
      • disko + nixos-anywhere (automatic partitioning & remote installation of new systems)
      • stylix (system-wide theming)
      • agenix (secret management)
      • impermanence (managing persistent data)
      • nixos containers for sandboxing applications & services (using systemd-nspawn)
    • TMPFS as /
    • LUKS
      • BTRFS as /nix (might try bcachefs)
      • SWAP partition (= RAM size, to susbend to disk)
    • Greetd with TUIgreet (DM)
    • SwayFX (WM)
    • Kitty & foot (term)
    • Nushell (shell)
    • Helix (editor)
    • Firefox (browser)
    • slackhq/nebula (c.f. self-hosted tailscale, connecting my systems beyond double NATs)

    EDIT1: fix “DE” -> “DM”