Home Ops

This repository documents my infrastructure-as-code configurations for managing my homelab & machines.

Architecture

• k3s is used as the Kubernetes distribution for my homelab environment.
• metallb provides load balancing for services within the k3s cluster.
• traefik serves as the ingress controller and reverse proxy for routing external traffic to services.
• longhorn is utilized for distributed block storage across the k3s nodes.
• sealed-secrets manages encrypted secrets within the Kubernetes cluster.
• letsencrypt is configured for wildcard SSL certificates for secure access to services.
• ansible is employed for automating server configuration and management.
• terraform manages cloud infrastructure including Cloudflare DNS and GitHub settings.

Structure

• ansible/: ansible playbooks and inventories for quick server configuration and setup.
• k8s/: k3s homelab management including helm charts and manifests.
• machines/: machine-specific configurations for my macOS and Linux setups.
• terraform/: infrastructure provisioning for cloud services (Cloudflare, etc.).

Services

Automation

Icon	Name	Description	Deployed Via
	n8n	Workflow automation tool	Helmfile

Databases

Icon	Name	Description	Deployed Via
	MongoDB (Atlas)	Managed MongoDB database hosting	MongoDB Operator
	MariaDB	Relational database service	Kubectl
	Redis	In-memory data structure store	Helmfile

Media & Content

Icon	Name	Description	Deployed Via
	Jackett (planned)	Torrent indexer	Helmfile
	Gitea (planned)	Self-hosted Git service + container registry	Helmfile

Monitoring & Management

Icon	Name	Description	Deployed Via
	Rancher	K8s cluster management platform	Helmfile
	Whoami	Simple service to display client information	Kubectl

Networking & Security

Icon	Name	Description	Deployed Via
	Logto (planned)	Centralized OIDC provider	Helmfile
	Twingate Connector	Secure remote access to private network	Helmfile

Storage

Icon	Name	Description	Deployed Via
	MinIO	S3-compatible object storage server	Helmfile

Tools

Icon	Name	Description	Deployed Via
	Code Server (planned)	Remote VSCode instance	Helmfile