GNU/Lisp Enthusiast!
Yes your description is just right and is the heart of my question. To use your terminology:
Currently:
Ideally:
In the ideal case, I would never have to change anything about the wireguard config/status on the Phone, nor would I have to change the domain name used to reach the resource on the Home Server.
Oh hm I didn’t think about your last point, maybe it’s not really an issue at all. I think I’m not 100% on how the wireguard networking works.
Suppose I tunnel all of my traffic through wireguard on the remote server. Say that while I am home, I request foo.local, which on the remote server DNS maps to a wireguard address corresponding to my home machine. The remote will return to me the wireguard address corresponding to the home machine, and then I will try and go to that wireguard address. Will the home router recognize that that wireguard address is local and not send it out to the remote server?
Yes that would work, but it feels a bit cumbersome to have 2 fqdns per service, which I would have to switch between using depending on on whether I’m local or not.
Right but I want to be connected to wireguard always, I just want the DNS/routing to be different based on home vs foreign network.
And so when away do you just directly connect to the external IP and do port forwarding?
So you have a public DNS record pointing to your home IP?
I think tailscale would work, though I’d ideally want to use something like headscale instead, but that’s a bit of a logistical hastle for my setup. Do you know if pangolin can handle this as well?
I have never used nix or nixos. I liked their shared idea (functional, atomic, reproducible systems), and so when I looked at their differences they seemed to all be pros for guix:
The only bittersweet aspect of guix compared to nix was the foss only stuff, as I do need some proprietary drivers, but nonguix is so easy it hasn’t been a practical issue. And of course I am big advocate of free software so I like that guix is pushing that forward.
There’s also a theoretical issue that guix has less packages, but the standard channel + nonguix has had everyhing I use.
Glad to hear it! Feel free to message me if you have any questions, though I’m not a Guix expert by any means, so the IRC channel on libera.chat is probably your best bet.
btw: you can also install guix as a standalone package manager on top of any other GNU/Linux distribution just like nix, and it can also use the nonguix channel.
Yes you can install non-free software on Guix. By default Guix only ships with non-free software in its iso and standard repo, but there is a nonguix channel (read repo) which comes with all the non-free software I’ve ever needed.
It’s very easy to add channels to Guix. Flatpak and Nix are also available on Guix if you’d prefer to use those ways of getting non-free software.
I quite enjoy it!
Being able to rollback any change I make to the system, either package changes or system configuration, makes it completely unbreakable and provides great peace of mind. It means I can fully enjoy its rolling-release nature without worrying.
Having my entire system configuration declared in a single, robust programming language (Guile) across a small number of files makes it very easy to understand and just stick into source control to reproduce.
Being able to hack on it in a lisp (scheme) is the cherry on top, along with the great emacs integration. I would highly recommend it to any lisp/emacs/gnu enthusiasts.
I love ipv6 but I don’t see how it is related to anything here