Working on an ultra-minimal control plane for self-hosted / private networks:
#WireGuard for all data transport, #Nostr used only for encrypted coordination.
Nostr handles hub discovery, peer enrolment, revocation, and key rotation when a VPS disappears or is rebuilt... no DNS, no fixed endpoints, no single point of failure.
Single pinned authority pubkey, anti-rollback, atomic A/B hub cutover with verification before disengaging the old hub.
Result: private services stay private, access survives VPS failure, and the “control plane” is more resilient than any single (or multi) VPS setup.
#homelab
Tom
tom@tomdwyer.uk
npub19at4...upzr
@hal what's the business model of free blossom servers like the default ones in Amethyst?
HI does this relay from bitsat
