By using custom package TLS cert for mere mortal No open inbound port required gzip and brotli files Use stable v2 instead of beta release route, strip_prefix, rewrite, reverse_proxy A guide on I2P Eepsite on NixOS A guide on Tor hidden service on NixOS