My edge hosting ran on Debian, Ansible, OpenResty, and HTTP/3 completely unremarkably. Why I migrated the production server to NixOS 26.05 anyway — and where the difference between orchestration and true declaration lies.
| 1 | const spotlight = { |
| 2 | status: 'production', |
| 3 | category: 'Architecture', |
| 4 | date: '14.09.2026', |
| 5 | readingTime: 6 // min, |
| 6 | topics: [ |
| 7 | '#NixOS', |
| 8 | '#Hosting', |
| 9 | '#OpenResty' |
| 10 | ], |
| 11 | runtime: 'Bare-Metal / Network / IaC' |
| 12 | }; |
Tools like tcpdump or dig don't lie — they just often answer a different question than you asked. Why you shouldn't blindly trust the first finding when troubleshooting networks on Linux.
I just wanted to listen to the radio. No 400 MB Electron monster, no app that indexes my MP3 collection first. So I just built it myself.
Reliable command reference for terminal and shell. Find commands for all major Linux distributions, BSD, macOS, and Unix systems.
What do you recommend to someone coming from Windows who just needs a working desktop? I put Zorin OS 18.1 through its paces on typical low-end hardware.
The most well-known macOS network monitor has arrived on Linux. Instead of kernel hacks, Little Snitch uses eBPF for granular app-level control. A look at the technology.
I run my own DNS, without external dependencies. A look at my production architecture: hidden primary in the homelab, two external slaves, and WireGuard as the transfer path.
Mullvad buries WireGuard-Go and bets on GotaTun in Rust. A technical look at FFI overhead, M:N schedulers, zero-copy, and deterministic timing for DAITA.