大きいＢＯＹ

Yeah. Fuck blink.

Most of the time you don’t need docker. NixOS isolates runtimes.

That being said, you could use nix to build the docker container, and then run it using the built-in oci-container options.

How do you host your DNS sinkhole/resolver?

Like this, baby:

services.adguardhome = {
      enable = true;
      mutableSettings = false;
      openFirewall = true;
      settings = {
        dns = {
          # Web Interface
          bootstrap_dns = ["9.9.9.9" "149.112.112.112"];
          upstream_dns = ["https://dns.quad9.net/dns-query"];
          fallback_dns = ["tls://dns.quad9.net"];
        };
        filters = [
          {
            name = "AdGuard DNS filter";
            url = "https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt";
            enabled = true;
          }
        ];
        filtering = {
          blocked_services = {
            ids = [
            ];
          };
          protection_enabled = true;
          filtering_enabled = true;
          rewrites = [
          ];
        };

Deploy to the main home server, and the backup instance. NixOS is fucking awesome. No sync tool needed.

Cool. More garbage.

Nixpkgs just does not have a review process that is on par with other distros.

We can agree on this. There is work to do.

Breakages on unstable are not uncommon.

I run unstable, and I have had this happen twice. Both times with Tmux (which is weird); but it was upstream issues. But fair enough. Maybe my systems aren’t exotic enough to experience the uncommon breakages.

Could nixpkgs do better? Yes. I mean, look at the backlog. You have to be active in the community to get your work merged in any decent timeframe. I think this is the most annoying part about the Nix ecosystem.

I think any NixOS maintainer would agree that the average quality of a package in NixOS is not as high as something like an official Arch or Debian package

Package maintainer here. Not sure what you mean by quality; as that term is very ambiguous. Shit works and configuration is often a breeze by comparison to other distros.

I would never go back to a legacy distro. Who wants to do that shit all by hand?