My home service stack running on a Beelink EQ12 with Fedora IoT. Applications are run as podman containers and managed by systemd to support my home infrastructure.

• direnv: Update environment per working directory.
• podman: A tool for managing OCI containers and pods with native systemd integration.
• renovate: Universal dependency automation tool.
• sops: Manage secrets which are commited to Git using Age for encryption.
• task: A task runner / simpler Make alternative written in Go.

1. Install required system deps and reboot

   sudo rpm-ostree install --idempotent --assumeyes git go-task
   sudo systemctl reboot

2. Make a new SSH key, add it to GitHub and clone your repo

   export GITHUB_USER="rkoosaar"
   curl https://github.com/$GITHUB_USER.keys > ~/.ssh/authorized_keys
   sudo install -d -o $(logname) -g $(logname) -m 755 /var/opt/home-service
   git clone [email protected]:$GITHUB_USER/home-service.git /var/opt/home-service/.

3. Install additional system deps and reboot

   cd /var/opt/home-service
   go-task deps
   sudo systemctl reboot

4. Create an Age public/private key pair for use with sops

   age-keygen -o /var/opt/home-service/age.key

1. Create the podman containernet network

   sudo podman network create \
       --driver=ipvlan \
       --ipam-driver=host-local \
       --subnet=10.1.0.0/24 \
       --gateway=10.1.0.1 \
       --ip-range=10.1.0.171-10.1.0.199 \
       containernet

2. Setup the currently used interface with systemd-networkd

   📍 Setting the DNS server to a container used on this system might make dragons appear 🐉.

   sudo bash -c 'cat << EOF > /etc/systemd/network/enp6s18.network
   [Match]
   Name = enp6s18
   [Network]
   DHCP = yes
   DNS = 1.1.1.1
   DNS = 1.0.0.1
   IPVLAN = containernet
   [DHCPv4]
   UseDNS = false'

3. Setup containernet with systemd-networkd

   sudo bash -c 'cat << EOF > /etc/systemd/network/containernet.netdev
   [NetDev]
   Name = containernet
   Kind = ipvlan'
   sudo bash -c 'cat << EOF > /etc/systemd/network/containernet.network
   [Match]
   Name = containernet
   [Network]
   IPForward = yes
   Address = 10.1.0.170/24'

4. Disable networkmanager, the enable and start systemd-networkd

   sudo systemctl disable --now NetworkManager
   sudo systemctl enable systemd-networkd
   sudo systemctl start systemd-networkd

View the apps directory for documentation on configuring an app container used here, or setup your own by reviewing the structure of this repository.

Using the included Taskfile there are helper commands to start, stop, restart containers and more. Run the command below to view all available tasks.

go-task --list

chsh -s /usr/bin/fish
# IMPORTANT: Log out and log back in
go-task dotfiles

sudo sed -i 's/^#allow .*/allow all/g' /etc/chrony.conf
sudo systemctl restart chronyd

sudo sed -i 's/SELINUX=enforcing/SELINUX=permissive/g' /etc/selinux/config
sudo systemctl reboot

sudo systemctl disable --now firewalld.service

• bjw-s/nix-config: NixOS driven configuration for running a home service machine, a nas or nix-darwin using deploy-rs and home-manager.
• truxnell/nix-config: NixOS driven configuration for running your entire homelab.
• joryirving/home-service: Docker-compose implementation of this repository.