A couple of days ago I finally figured out how to handle secrets deployment using sops-nix on remote hosts. And now there’s a headscale network replacing tailscale, connecting a VPS through caddy as a proxy with my home network. For now only immich is available from my home workstation, with a first example gallery from my walk yesterday morning.
Isn’t that nice?