github nasty-project/nasty v0.0.3
NASty v0.0.3

latest releases: v0.0.9, v0.0.8, v0.0.7...
one month ago

Flake-based appliance architecture

The biggest change since v0.0.1: the entire NixOS appliance model was rearchitected. NASty now uses a two-flake system — a slim local wrapper flake at /etc/nixos imports upstream NASty as a flake input. System updates are just nix flake update, no Git repo on the appliance. This was a multi-PR effort by @peigongdsd, including tagged release upgrades and generation-owned flake recovery.

Tailscale VPN

Built-in Tailscale integration — connect your NASty appliance to your tailnet from the WebUI. NVMe-oF ports automatically sync with the Tailscale interface so block storage works over the VPN out of the box.

Apps (Helm/k3s)

Run containerized apps directly on NASty via an embedded k3s runtime. Install Helm charts from the WebUI, with auto-detected container ports, auto-assigned NodePorts, and nginx ingress routing at /apps/{name}/.

UPS monitoring

NUT (Network UPS Tools) support for local USB UPS devices. See battery status, load, and runtime directly in Settings.

NAS tuning

New tuning panel for NFS thread count, SMB, iSCSI, and VM writeback settings. Filesystem options now include IO scheduler, journal flush delay, data/metadata replicas, and mover tuning.

Filesystem management improvements

  • Erasure coding controls (gated on actual disk count)
  • Checksum algorithm selection
  • Online reconcile toggle
  • Disk topology view with controller/port mapping
  • Device evacuation fixes — no longer blocks the API or reports false completion
  • Superblock cleanup on destroy, stale device detection fixed

Performance

  • Batched subvolume queries (replaces per-subvolume du/losetup)
  • Merged xattr reads into single pass
  • TTL cache on filesystem listing
  • Parallelized alert collection

Other

  • VM support with OVMF UEFI firmware
  • Cachix binary cache for faster updates
  • Periodic auth check for expired sessions
  • Let's Encrypt TLS support
  • bcachefs-tools bumped to v1.37.5
  • Added iotop-c, btop, fwupd, rsync, croc to appliance
  • Kernel errors monitoring added to alerts

Don't miss a new nasty release

NewReleases is sending notifications on new releases.