• 3 Posts
  • 35 Comments
Joined 2 months ago
cake
Cake day: February 5th, 2025

help-circle







  • Some NixOS native packages and options change the defaults to be more security conscious rather than “easy to spin up.” Doing a basic nginx config in NixOS will be more secure than if you had installed it through debian’s apt or from source. Similar for ssh, you just don’t have to think as much about doing those few obvious config changes you always have to do when spinning up a new machine. Of course, there are some things you have to customize for yourself (like custom ports, paths, etc.), but they make it a little simpler by assuming you’re using NixOS in a production environment.

    A couple of other links that you’ll end up referencing all the time if you get into NixOS:

    The first link is the native package repo, and the second link are all the NixOS config parameters for each of those packages and the system in general.

    they don’t complain but I know it will make their lives easier

    Perfect. So when you do provide them with an efficiency boost when they never asked about it, you can be a rockstar and get a raise. Or keep it in your back pocket until they do complain and implement it then for a similar effect 😜


  • Oh, sweet!

    In that case, I highly recommend taking a look at some more real-world examples. My original link is just something that makes self-hosting and small jobs more or less thoughtless for me.

    Imagine all those config management tools built into your OS, and that’s NixOS in a nutshell. There’s obviously WAY more it can do if you look into creating your own derivations, or getting into the new-ish concept of Flakes.

    Again, though, nixops is the thing that makes me continue to use it, besides just already knowing how to throw together a config in nix’s syntax. The nixops tool basically allows you to federate all your systems, tag them, group them, and do anything under the sun with each machine (or several in batches). It’s hard to get across in a simple text blurb.

    In my case (SaaS), imagine having 10 devs that all want their own dev environment that mirrors production within our VPN, then you need a beta and production environment for each client that licenses the app. Each environment has a couple databases, a few different APIs, some background scraper-type applications, and front-ends for everything. Some of that stuff can live on one machine, some needs to be alone and redundant. You can see how very quickly there’s a lot of machines to keep track of.

    Now I need to update a couple config pieces to match a new feature in the app itself. Well, all I gotta do is sort out the config, then run a couple nixops command to push to all the dev environments. When ready, do the same for beta, then do it for prod when the fat lady sings.

    Being all within one ecosystem, focused on security hardening, is what I really like about it. Hopefully that wasn’t too stream-of-consciousness for ya, lmao.

    ETA: links, also note that nixops is undergoing some serious changes in the past year. NixOS itself also undergoes changes fairly regularly in syntax as vulnerabilities are addressed and improvements made.




  • I can’t tell if you’re being serious or facetious 😅

    I assure you it isn’t all that glorious, though, just a lot of configs. NixOS is just my favorite method of infrastructure-as-code, and in conjunction with nixops I can’t imagine going back to anything else unless the project required it for some reason. Disaster recovery is simple, and testing/pushing config changes to hundreds of machines is almost too easy.

    I have a clunky set of configs, for self-hosting at home and small side-clients, I slapped together you can look at, but again it’s not all that special and I wouldn’t necessarily follow this for real production stuffs. It also doesn’t utilize any of the fancy NixOS stuff, fairly basic and Docker heavy.

    https://codeberg.org/madamegaymes/NixOS-Docker-Framework




  • I think you misunderstood, hence the downvotes.

    OP is asking what a good distro is for a media center PC, as in the PC’s video output will be connected to the TV’s video input. At which point Linux does not give two shits.

    Sounds like you thought they wanted to stream/cast via some TV app or something, but that just sounds like a nightmare and I’m not sure that anyone would even want to try to do that. Just run Linux and use the TV as a big monitor, be done with smart TV garbage.




  • Yo, that’s Benn Fucking Jordan, aka The Flashbulb!

    He’s always had great views on this stuff. From his wiki about piracy:

    After the collapse of Sublight Records, instead of taking on another contract, Jordan purchased his previous licenses and released his most anticipated album, Soundtrack to a Vacant Life, on his own record label, Alphabasic Records. On the day of its release, he personally uploaded copies of the album to music piracy sites, including a small HTML file explaining his relaxed views on file sharing and showing listeners where they could give support if they desired. This resulted in attention by the mainstream press, and the album became the most downloaded album on many popular file sharing networks.

    Jordan has spoken extensively on issues of net neutrality, free speech, and copyright laws in the music world. In an interview with TorrentFreak, he encourages involvement in these issues and warns against corporations like Amazon or iTunes and their ability to stem the free flow of information. File sharing, to Jordan, is a way of bypassing this potential oppression and accessing information freely. In the aforementioned interview, Jordan notes that “file trading is just a peephole to a much larger picture. Copyright, in its current state, holds information at ransom for monetary value. While in music it can stifle culture and art, with literature and education it can be nothing less than a weapon of class warfare.”

    In a 2024 episode of “The New Music Business” podcast Jordan reviewed these perspectives in the context of having been the subject of False Streaming Activity and having had his music taken down by distributors.