{"repo":"savely-krasovsky/homelab","free":true,"listed":false,"github":"https://github.com/savely-krasovsky/homelab","clone":"git clone https://github.com/savely-krasovsky/homelab.git","description":"Personal Homelab","language":"HCL","stars":102,"topics":["fedora-coreos","flatcar","homelab","opentofu","podman","proxmox","quadlets","terraform"],"license":null,"category":"deployment-docker-iac","readme_excerpt":"Experimental Homelab - Uses immutable, atomic Fedora CoreOS provisioned on a Proxmox VE node as a base. - Uses rootless Podman instead of rootful Docker. - Uses Quadlet systemd-like containers instead of Docker Compose. - VM can be fully removed and re-provisioned in a few minutes, including container autostart. - Provisioning is done with OpenTofu/Terraform. - Configs are rendered from templates and synced automatically after changes. - Secrets are provided using Bitwarden Secrets Manager. - Bitwarden token is injected into VM credentials and then mapped to Podman/system credentials during bootstrap. - Source IP is preserved using systemd socket activation with Traefik. - Native network performance due to the reason above. - Podman and application data are stored on a dedicated iSCSI-backed LVM disk. - Media, personal files, and observability data are stored on NFS shares. - Daily restic backups are done from LVM snapshots to Backblaze B2 and Storj. - Uses per-stack Podman networks plus a shared reverse-proxy network. - Container-to-container traffic stays on-host inside Podman networks, while shared domain names are still used via Traefik NetworkAlias . - Uses nftables default-deny firewall policy. - SELinux support (including explicit context fixes where needed). I also have some observability: - Storage: VictoriaMetrics, VictoriaLogs, and VictoriaTraces. - Collection and routing: Grafana Alloy (Prometheus/Loki/OTLP) and Telegraf for MQTT - OTLP. - Visualization: Grafana. ","default_branch":null,"files":null,"tree":[],"storefront":"/r/savely-krasovsky","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/savely-krasovsky/homelab/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}