I am currently switching over from Debian/rocky lxc containers on proxmox to declaratively creating vm via opentofu, then running nixos-anywhere and then running colmena for updates etc. works great and I should have done it sooner.

Problem Tailscale. I encrypted the authkey via agenix but the new nixos hosts can not read the file and fail to login. The file is available but I think the vms can not decrypt it. Needs further investigation

Does the caddy user have the permissions to read the files ? I ran into that problem as well. If only caddy needs the cert I moved them into /etc/caddy, chowned the dir again, make sure you use the full path of the cert so /etc/caddy/domain.crt not ./domain.crt

https://monkeytype.com/

Could be an option

I use AI as a sort of junior developer, I know the problem domain but a bit to lazy to write all the code. I develop on a remote Linux VM with tmux, nvim and opencode. Have the ai tmux session and my development session on a different project. Make sure to have a clean git tree and then I detach from one session to the ai session and check the progress.

The ai makes mistakes so a cautious review of all the code is needed.

I mostly use Claude and I can NOT recommend any kimi k2 model. If you need something okish and cheap use open router gpt-oss 120.

AI is a power tool if you don’t know what are you doing you get burned.

Valid crashout. 🤣

I can confirm that.