Homelab GitOps

This repo holds the Flux GitOps configuration for my homelab Kubernetes cluster. Core manifests live in cluster/, and cluster/kustomization.yaml assembles the full tree. Infrastructure components are grouped under cluster/infrastructure/<service>/.

Prerequisites

• nix for the dev shell (recommended).
• kubectl, flux, helm, and cilium-cli (available via nix develop).
• Cluster access for reconcile commands.

Common commands

nix develop
kubectl kustomize cluster
flux reconcile kustomization -n flux-system infrastructure
flux get kustomizations

Repository structure

• cluster/: main GitOps manifests and cluster/kustomization.yaml.
• cluster/flux-system/: Flux bootstrap manifests.
• cluster/infrastructure/: service components (each has helmrepo.yaml, helmrelease.yaml, namespace.yaml, and kustomization.yaml).
• docs/: operational notes, including docs/http-proxy-guide.md.

Notes

• Secrets are referenced via 1Password items (see cluster/infrastructure/1password/ and cluster/infrastructure/cert-manager/secret.yaml); do not commit plaintext secrets.
• The cluster is IPv6-only; external access may require the HTTP proxy guide.

Todo

• traefik
• longhorn
• external dns
• cert-maanger
• longhorn backups
• kanidm
• expose longhorn website
• expose traefik website
• oauth proxy
• harbor
• forjego
• immich
• pastebin of some kind
• kanidm operator
• some action runner thingie
• monitoring
• website
• figure out why metrics not being reported in lens