nix-config/hosts/12kingdoms-suzu

Suzu - Orange Pi 5

LUKS encrypted SSD for NixOS, on Orange Pi 5.

TODOs

• Add support for BGP routing.
  • Comparing Open Source BGP Stacks
  • services.frr.* - search.nixos.org

Showcases

Features

Micro VMs:

1. suzi: dae router(transparent proxy, dhcp)
2. mitsuha: tailscale gateway(sub router)

Services:

1. OCI Containers: to run some servides that's not available in NixOS.
2. ddns
3. uptime-kuma: uptime monitoring
4. excalidraw/DDTV/owncast/jitsi-meet/...

All the services assumes a reverse proxy to be setup in the front, they are all listening on localhost, and a caddy service is listening on the local network interface and proxy the requests to the services.

TODO: create a private PKI for caddy, to achieve end-to-end encryption between caddy and the services.