Homelab
A small production-style platform at home that I use to practice what I do at work: run it like a real service, break it, find out why, and write it down. The Homelab Rebuild series tells the whole story, one change or outage per post.
Hardware. A three-node Proxmox VE 9 cluster (pve-01, pve-02,
pve-03), two of them Lenovo ThinkCentre M715q Tiny mini PCs.
Platform.
- Kubernetes on k0s: 3 controllers and 5 workers as VMs, one controller per host (Part 2 ).
- Cilium for networking and the Gateway API, with WireGuard between hosts (Part 3 , Part 26 ).
- FluxCD for every app, Terraform for the VMs, and self-hosted GitHub runners in the cluster (Part 7 , Part 16 ).
- OpenBao for secrets, with External Secrets Operator and an OIDC login (Part 5 , Part 19 ).
- CloudNativePG for Postgres, spread across hosts (Part 8 ).
- OpenTelemetry, VictoriaMetrics, VictoriaLogs and Grafana for observability (Part 14 ).
- Kyverno and Tetragon for policy and runtime detection (Part 11 , Part 17 ).
Access. Three ways in: the tailnet, the home LAN, and the internet through a Cloudflare Tunnel that reaches nothing until an app opts in (Three Ways Into My Homelab ).