--- layout: default title: Note date: "2025-05-13 17:41" --- A couple of days ago I finally figured out how to handle secrets deployment using [sops-nix](https://github.com/Mic92/sops-nix) on remote hosts. And now there's a [headscale](https://headscale.net) network replacing tailscale, connecting a VPS through [caddy](https://caddyserver.com/) as a proxy with my home network. For now only [immich](https://immich.app/) is available from my home workstation, with a [first example gallery from my walk yesterday morning](https://photos.muhh.lol/share/4-UCjvbHVwBE4JE5oRoBTmowv8dmDJi_O9rsojuQWHKMjY0wJ-HGzLVE_cpwLIdYxR8). Isn't that nice?