1Git2Clone Skip to content

Infrastructure

One VPS, described end to end in a single NixOS flake — disks, firewall, secrets, and every container service.

There is no state on the server that the repository does not describe, and nothing to remember to run. Where the setup it replaced needed three layers — a restart policy, a boot-time sweep, and a converge run from my workstation — this is one: systemd units built from the flake. OpenTofu creates the machine and publishes its DNS.

Read the flake

Stack

Overview

Tap or click a box for what it does. With a mouse, drag them around.

InternetCloudflareOpenTofuHetzner VPSsops-nixnftablesresticCaddyTailscaleDiscordForgejoPagesUptime KumaRoundcubeMailserverNavidromeSearXNGSerenity botMinecraftGrafanaDozzleSyncthingPostgreSQLRedis

Public

Reachable from anywhere, behind one reverse proxy and one certificate.

Service What it is
Forgejo
git.hu-tao.dev		 Git hosting with its own Actions runner. Mirrors of everything here. Because GitHub is closed-source.
Uptime Kuma
status.hu-tao.dev		 A status page for all my user-facing services. So you can ridicule me when I don't fulfill my SLAs.
Navidrome
music.hu-tao.dev		 Because I got tired of paying for music I don't own.
Pages
pages.hu-tao.dev		 Static sites built by Actions workflows and served straight off disk. The linked page is a fork from compress.lol, a web-based video compressor running ffmpeg entirely on the frontend using WebAssembly.
SearXNG
search.hu-tao.dev		 Metasearch with no accounts of its own. PS: Make sure to star the repo.
Serenity bot
git.hu-tao.dev		 A fun interactions Discord bot written in Rust (poise & serenity) using Postgres, Redis, Grafana & Tempo. You can check it out at @NoPengoo's Discord server. Or register it under your server or Discord account using this OAuth2 URL.
Minecraft
mc.hu-tao.dev		 A minecraft server for me and my friends. Note: You need to be in the whitelisted players to join.

Also Running

Private, or mine rather than yours. Listed because they are part of the same flake, not linked because there is nothing useful for a visitor behind them.

Service What it is
Grafana + Tempo
grafana.hu-tao.dev • Tailnet only		 Dashboards and OTLP traces.
Dozzle
dozzle.hu-tao.dev • Tailnet only		 Live container logs for all my services.
Syncthing
syncthing.hu-tao.dev • Tailnet only		 File sync across my machines.
Roundcube Mail
mail.hu-tao.dev • Tailnet only		 Web-based mailbox viewer for my mailserver at smtp.hu-tao.dev.
PostgreSQL + pgbouncer Shared database and connection pooler.