{"repo":"onedr0p/home-ops","free":true,"listed":false,"github":"https://github.com/onedr0p/home-ops","clone":"git clone https://github.com/onedr0p/home-ops.git","description":"Wife approved HomeOps driven by Kubernetes and GitOps using Flux","language":"YAML","stars":2863,"topics":["kubernetes","gitops","flux","renovate","selfhosted","kubesearch","talos","mise","justfile"],"license":"WTFPL","category":"deployment-docker-iac","readme_excerpt":"My Home Operations Repository ... managed with Flux, Renovate, and GitHub Actions                                        --- Overview This is a mono repository for my home infrastructure and Kubernetes cluster. I try to adhere to Infrastructure as Code (IaC) and GitOps practices using tools like Ansible, Terraform, Kubernetes, Flux, Renovate, and GitHub Actions. --- Kubernetes My Kubernetes cluster is deployed with Talos. This is a semi-hyper-converged cluster, workloads and block storage are sharing the same available resources on my nodes while I have a separate server with ZFS for NFS/SMB shares, bulk file storage and backups. There is a template over at onedr0p/cluster-template if you want to try and follow along with some of the practices I use here. Core Components - Networking & Service Mesh : cilium provides eBPF-based networking, while istio powers service-to-service communication with L7 proxying and traffic management. cloudflared secures ingress traffic via Cloudflare, and external-dns keeps DNS records in sync automatically. - Security & Secrets : cert-manager automates SSL/TLS certificate management. For secrets, I use external-secrets with 1Password Connect to inject secrets into Kubernetes. - Storage & Data Protection : rook provides distributed storage for persistent volumes, with kopiur handling backups and restores. spegel improv","default_branch":null,"files":null,"tree":[],"storefront":"/r/onedr0p","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/onedr0p/home-ops/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}