A lightweight network setup for a small server OS
LainOS Layer 02 defines the basic parts needed for , firewall rules, time sync, and logging. dhcpcd gets an IP address automatically from the network and passes DNS server details to openresolv. openresolv combines DNS settings from dhcpcd and possible future sources, such as VPNs, into one `/etc/resolv.conf` file.
iwd handles WiFi without depending on systemd, and it is set to use a randomized once per boot instead of exposing the real hardware address. nftables acts as the firewall: incoming and forwarded traffic is blocked by default, existing related connections and loopback traffic are allowed, and unwanted traffic is rejected with . chrony keeps the system clock accurate, which matters for checks such as .
syslog-ng collects system-wide logs, including network service logs, and writes them under `/var/log/`. A future addition is unbound as a local with DNSSEC .
Key points
- dhcpcd automatically gets an IP address and passes DNS server details along.
- openresolv keeps DNS settings in one central `/etc/resolv.conf` file.
- iwd handles WiFi and can use a randomized at each boot.
- nftables blocks incoming traffic by default while allowing established connections.
- chrony keeps time accurate, which helps work correctly.