{"id":23172723,"url":"https://github.com/vehagn/homelab","last_synced_at":"2025-04-04T17:04:20.250Z","repository":{"id":61260172,"uuid":"496638610","full_name":"vehagn/homelab","owner":"vehagn","description":"Configuration for my homelab running Talos Kubernetes provisioned with OpenTofu.","archived":false,"fork":false,"pushed_at":"2025-03-28T15:55:23.000Z","size":968,"stargazers_count":201,"open_issues_count":23,"forks_count":31,"subscribers_count":4,"default_branch":"main","last_synced_at":"2025-03-28T16:04:05.974Z","etag":null,"topics":["argocd","cert-manager","cilium","cloudflare","cloudflared","csi","home","hugo","kubernetes","netbird","opentofu","plex","plex-media-server","radarr","renovate","self-hosting","sonarr","talos","tofu"],"latest_commit_sha":null,"homepage":"https://blog.stonegarden.dev","language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/vehagn.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-05-26T13:50:09.000Z","updated_at":"2025-03-28T00:14:22.000Z","dependencies_parsed_at":"2023-12-20T12:38:59.751Z","dependency_job_id":"adf3ea9d-c6fe-43fe-8206-99b5f43ce946","html_url":"https://github.com/vehagn/homelab","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vehagn%2Fhomelab","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vehagn%2Fhomelab/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vehagn%2Fhomelab/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/vehagn%2Fhomelab/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/vehagn","download_url":"https://codeload.github.com/vehagn/homelab/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247217173,"owners_count":20903008,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["argocd","cert-manager","cilium","cloudflare","cloudflared","csi","home","hugo","kubernetes","netbird","opentofu","plex","plex-media-server","radarr","renovate","self-hosting","sonarr","talos","tofu"],"created_at":"2024-12-18T04:51:37.007Z","updated_at":"2025-04-04T17:04:20.234Z","avatar_url":"https://github.com/vehagn.png","language":"HCL","funding_links":[],"categories":["kubernetes","HCL"],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n\n# 🪨 Homelab 🏡\n\nRepository for home infrastructure and [Kubernetes](https://kubernetes.io/) cluster\nusing [GitOps](https://en.wikipedia.org/wiki/DevOps) practices.\n\nHeld together using [Proxmox VE](https://www.proxmox.com/en/proxmox-virtual-environment),\n[OpenTofu](https://opentofu.org/), [Talos](https://talos.dev), [Kubernetes](https://kubernetes.io/),\n[Argo CD](https://argoproj.github.io/cd/) and copious amounts of [YAML](https://yaml.org/) with some help\nfrom [Renovate](https://www.mend.io/renovate/).\n\n\u003c/div\u003e\n\n---\n\n## 📖 Overview\n\nThis repository hosts the IaC ([Infrastructure as Code](https://en.wikipedia.org/wiki/Infrastructure_as_code))\nconfiguration for my homelab.\n\nThe Homelab is backed by [Proxmox VE](https://www.proxmox.com/en/proxmox-virtual-environment) hypervisor nodes with VMs\nbootstrapped using [OpenTofu](https://opentofu.org/)/[Terraform](https://www.terraform.io/).\n\nMost of the services run on [Talos](https://www.talos.dev/) flavoured [Kubernetes](https://kubernetes.io/),\nthough I'm also running a [TrueNAS](https://www.truenas.com/) VM for storage\nand [Home Assistant](https://www.home-assistant.io/) VM for home automation.\n\nTo organise all the configuration I've opted for an approach using Kustomized Helm\nwith [Argo CD](https://argoproj.github.io/cd/) which I've explained in more\ndetail [in this article](https://blog.stonegarden.dev/articles/2023/09/argocd-kustomize-with-helm/).\n\nI journal my homelab journey over at my self-hosted [blog](https://blog.stonegarden.dev).\n\n## 🧑‍💻 Getting Started\n\nIf you're new to Kubernetes I've written a fairly thorough guide\non [Bootstrapping k3s with Cilium](https://blog.stonegarden.dev/articles/2024/02/bootstrapping-k3s-with-cilium/).\nIn the article I try to guide you from a fresh Debian 12 Bookworm install to a working cluster using\nthe [k3s](https://k3s.io) flavour of Kubernetes with [Cilium](https://cilium.io) as a [CNI](https://www.cni.dev)\nand [IngressController](https://kubernetes.io/docs/concepts/services-networking/ingress-controllers/).\n\nI've also written an article on how to get started\nwith [Kubernetes on Proxmox](https://blog.stonegarden.dev/articles/2024/03/proxmox-k8s-with-cilium/) if virtualisation\nis more your thing.\n\nThe current iteration of my homelab runs on [Talos](https://talos.dev) Kubernetes and is set up according\nto [this article](https://blog.stonegarden.dev/articles/2024/08/talos-proxmox-tofu/).\n\n## ⚙️ Core Components\n\n* [Proxmox VE](https://www.proxmox.com/en/proxmox-virtual-environment): Server management and KVM hypervisor.\n* [OpenTofu](https://opentofu.org/): Open source infrastructure as code tool.\n* [Cilium](https://cilium.io/): eBPF-based Networking, Observability, Security.\n* [Proxmox CSI Plugin](https://github.com/sergelogvinov/proxmox-csi-plugin): CSI driver for storage\n* [Argo CD](https://argo-cd.readthedocs.io/en/stable/): Declarative, GitOps continuous delivery tool for Kubernetes.\n* [Cert-manager](https://cert-manager.io/): Cloud native certificate management.\n* [Sealed-secrets](https://github.com/bitnami-labs/sealed-secrets): Encrypt your Secret into a SealedSecret, which is\n  safe to store - even inside a public repository.\n* [Authelia](https://www.authelia.com/): open-source authentication and authorization server\n* [Gateway API](https://gateway-api.sigs.k8s.io/): Next generation of Kubernetes Ingress\n* [AdGuardHome](https://github.com/AdguardTeam/AdGuardHome): Domain name server backed by Unbound\n* [NetBird](https://netbird.io/): Completely self hosted VPN solution\n* [CloudNativePG](https://cloudnative-pg.io/): PostgreSQL database operator\n\n## 🗃️ Folder Structure\n\n```shell\n.\n├── 📂 docs                # Documentation\n├── 📂 k8s                 # Kubernetes manifests\n│   ├── 📂 apps            # Applications\n│   ├── 📂 infra           # Infrastructure components\n│   └── 📂 sets            # Bootstrapping ApplicationSets\n└── 📂 tofu                # Tofu configuration\n    ├── 📂 home-assistant  # Home Assistant VM\n    └── 📂 kubernetes      # Kubernetes VM configuration\n        ├── 📂 bootstrap   # Kubernetes bootstrap config\n        └── 📂 talos       # Talos configuration \n```\n\n## 🖥️ Hardware\n\n| Name   | Device                    | CPU             | RAM            | Storage          | Purpose           |\n|--------|---------------------------|-----------------|----------------|------------------|-------------------|\n| Abel   | CWWK 6 LAN Port           | Intel i3-N305   | 48 GB DDR5     | -                | Control-plane     |\n| Euclid | ASUS ExpertCenter PN42    | Intel N100      | 32 GB DDR4     | -                | Control-plane     |\n| Cantor | ASUS PRIME N100I-D D4     | Intel N100      | 32 GB DDR4     | 5x8TB HDD RaidZ2 | NAS/Control-plane |\n| Gauss  | Dell Precision Tower 5810 | Xeon E5-1650 v3 | 64 GB DDR4 ECC | 14 TB HDD        | Compute           |\n\n## 🏗️ Work in Progress\n\n- [ ] External DNS\n- [ ] Use BGP with Cilium and UniFi\n- [ ] Hajimari dashboard\n- [ ] Podcast client\n- [ ] Immich for photos\n- [ ] Nextcloud for files\n- [ ] Self-hosted git-solution (Gitea, GitLab, etc.)\n\n## 👷‍ Future Projects\n\n- [ ] Explore Kanidm as an identity management platform\n- [ ] Explore other database operators\n- [ ] Implement LGTM-stack for monitoring\n- [ ] Local LLM\n- [ ] Dynamic Resource Allocation for GPU\n- [ ] Cilium mTLS \u0026 SPIFFE/SPIRE\n- [ ] Ceph for distributed storage\n- [ ] OPNSense/pfSense/OpenWRT\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvehagn%2Fhomelab","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fvehagn%2Fhomelab","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fvehagn%2Fhomelab/lists"}