This monorepo contains notes and configuration for my homelab and related cloud infrastructure. It allows me to provide useful applications & services while gaining hands-on experience with enterprise best practices including GitOps, infrastructure-as-code, fault tolerance, and platform security.
I use the following tools & technologies in support of these goals:
- GitOps via
FluxCD,Helm, andKustomize - IaC via
OpenTofu(previously, I usedTerraform) - Integrated secrets management via
sops(repository secrets) and the External Secrets Operator (for secrets sync) - CI automation via
GitHub Actions,conftest,pre-commit; supported byFluxCD - Security & policy management (as code!) via
Kyvernowith network security viaCilium - Resilient stateful workloads via
Longhornfor distributed storage - Magical bare-metal Kubernetes via
Taloswith full disk encryption and robust node security