GitOps my home infra
March 18, 2026 ยท View on GitHub
GitOps my home infra
- ๐ผ managed with Flux2
- ๐ค updated by RenovateBot
- ๐ secured by Let's Encrypt and Cloudflare Tunnel
Table of Contents
Statistics
About The Project
๐ Hello and welcome to my Home Lab GitOps Cluster Configuration!
In this project, I am thrilled to share with you the automated configuration of my home infrastructure. As an ardent believer in continuous learning, I embrace every opportunity to challenge myself and expand my knowledge horizon. Through this venture, I aim to not only streamline and automate my daily tasks but also encourage collaboration and knowledge sharing within the community.
This is a private project heavily inspired by the great k8s-at-home community.
Let's take a glimpse into the evolution of this project:
- The Foundation: flux.home-cluster starting with a first iteration and learn Flux and GitOps principles with some old hardware.
- The Minimal Redundancy Edition: flux.pi-k3s.home starting a new project with a Raspberry Pi based GitOps Flux Cluster, with three control planes.
- The Merge: flux.k3s.home after a successfull testing phase I merged both projects into one cluster.
By making my findings and work accessible to all, I strongly believe in the principle that knowledge should be free, empowering individuals to avoid repetitive endeavors and instead focus on new and exciting challenges.
Join me on this exciting journey as we delve into the realm of Kubernetes and GitOps, uncovering new insights and finding innovative ways to enhance our setups. Let's embrace the spirit of collaboration and empower each other to achieve more.
Happy automating, learning, and exploring!
๐งฐ Tools and Technologies
Here is the list of tools and technologies I am using in this project.
| Tool | Role |
|---|---|
| talos | Linux designed for Kubernetes โ secure, immutable, and minimal. |
| Flux2 | Kubernetes GitOps engine |
| Cloudflare | DNS and tunnels to allow external traffic |
| RenovateBot | Automated dependency updates. |
| GitHub | Code Hosting and job runnner |
| Backstage | Documentation with backstage developer portal |
๐ Overview
Hardware
| Device | CPU | OS | OS Disk | Data Disk | RAM | Purpose |
|---|---|---|---|---|---|---|
| MS-01 | i9-13900H | Talos | 1 TB NVMe | 500GB NVMe (rook-ceph) | 96GB | Kubernetes |
| MS-01 | i9-13900H | Talos | 1 TB NVMe | 500GB NVMe (rook-ceph) | 96GB | Kubernetes |
| MS-01 | i9-13900H | Talos | 1 TB NVMe | 500GB NVMe (rook-ceph) | 96GB | Kubernetes |
| Intel NUC7i7DNHE | i7-8650U | Talos | 500 GB SSD | - | 32GB | Utility |
| AOSTAR WTR Pro | N100 | TrueNAS | 250 GB NVMe | 4x 8 TB HDD | 32GB | NAS |
| UniFi UDM SE | - | - | 128GB SSD | - | - | Router |
| UniFi USW Aggregation | - | - | - | - | - | Switch |
Getting Started
Prerequisites
- mozilla sops
- age
- talhelper
Usage
Configure SOPS (optional)
Provide key in path defined in .envrc.
Configure kubectl
Just run
task talos:config
task talos:kubeconfig
Roadmap
- Complete README.md
- Add Changelog
- Add GitHub Pages
See the open issues for a full list of proposed features (and known issues).
๐ต Troubleshooting
Stuck HelmRelease
example:
โ flux suspend hr -n networking traefik
โบ suspending helmreleases traefik in networking namespace
โ helmreleases suspended
โ flux resume hr -n networking traefik
โบ resuming helmreleases traefik in networking namespace
โ helmreleases resumed
โ waiting for HelmRelease reconciliation
โ HelmRelease reconciliation completed
โ applied revision 10.9.1