Thinking about setting up a NixOS or Guix firewall/router. I like OpenWRT but upgrades are a bit annoying, although should improve with the new packaging system.

The idea of having a single config file I can deploy on new hardware almost immediately is very appealing, however.

It’s enough if you just need access in a VM or over a lan (depending on your threat model) but agreed.

but there’s no NFS on Windows anyway

There is, although only the client and only v3 support.

Tailscale/Wireguard are installed on the KVM itself, not the server you are trying to access. It’s just a Linux machine after all.

I don’t know if the JetKVM supports it, but PiKVM and BliKVM support adding a multi-port KVM switch to it (see: https://docs.pikvm.org/multiport/).

It’s a bit finicky depending on the device you use (some will require custom cables).

Prices vary but there’s also BliKVM where the V3 version is essentially a clone of the PiKVM (and goes for around 90 USD) and they have their own Allwinner chipset version that I have seen even cheaper than that (although not currently). So not too out of the ordinary.

Worth noting here that KVMs are potentially a quite Hugh security risk.

You can put them behind a VPN and they should be relatively secure. I definitely wouldn’t expose it on the web directly, however.

App looks very nice and good to see active subsonic clients. I’ll stick to DSub until random album support (#289) and download starred albums/artists (#197) is implemented, but I’ll be keeping a close eye on this one.

If you want to use DNS challenge with Caddy it’s kind of annoying though (need to download/compile a separate version with the DNS plugin you need).

Which is probably a good idea if you don’t plan to expose the services publicly but want a real certificate to avoid self-signed cert warnings.