https://github.com/rwlove/home-ops
Lovenet Cluster Configuration
https://github.com/rwlove/home-ops
flux flux2 gitops home-operations home-ops k8s-at-home kubernetes renovate selfhosted
Last synced: 6 months ago
JSON representation
Lovenet Cluster Configuration
- Host: GitHub
- URL: https://github.com/rwlove/home-ops
- Owner: rwlove
- Created: 2021-03-09T20:03:13.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2024-10-29T12:27:32.000Z (6 months ago)
- Last Synced: 2024-10-29T14:43:52.611Z (6 months ago)
- Topics: flux, flux2, gitops, home-operations, home-ops, k8s-at-home, kubernetes, renovate, selfhosted
- Language: Shell
- Homepage: https://rwlove.github.io/home-ops/
- Size: 39.3 MB
- Stars: 9
- Watchers: 1
- Forks: 0
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
## Lovenet Home Operations Repository
_Managed by Flux, Renovate and GitHub Actions_ :robot:
[](https://github.com/kashalls/kromgo/)
[](https://github.com/rwlove/home-ops/actions/workflows/renovate.yaml)
[](https://rwlove.github.io/home-ops/)
Kubernetes Cluster Information:
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/kashalls/kromgo/)
[](https://github.com/rwlove/home-ops/actions/workflows/lychee.yaml)
## Overview
This is the configuration for my GitOps homelab Kubernetes cluster. This cluster runs home software services for my residence. It is quite complex and there are a lot of interdependencies but the declarative nature of GitOps allows me to manage this mesh of code. The software services fall into a few primary categories:
* Home Automation ([Home Assistant](https://www.home-assistant.io/), [ESPHome](https://esphome.io/), [Node-Red](https://github.com/node-red/node-red), [EMQX](https://github.com/emqx/emqx), [ZWave JS UI](https://github.com/zwave-js/zwave-js-ui), [Zigbee2MQTT](https://www.zigbee2mqtt.io/))
* Home Metering and Monitoring (Weather Station, Power Monitoring, Sensors)
* Home Security ([Frigate](https://frigate.video/), [Double Take](https://github.com/jakowenko/double-take))
* IOT Devices ([WLED](https://kno.wled.ge/), [Ratgdo](https://github.com/PaulWieland/ratgdo))
## Core Components
### Infrastructure
- [CentOS 9 Stream](https://www.centos.org/centos-stream/): Kubernetes Node Operating System.
- [crun](https://github.com/containers/crun): Container Runtime implemented in C.
- [nVIDIA Container Toolkit](https://github.com/NVIDIA/nvidia-container-toolkit): Container Runtime for nVIDIA GPUs.
### Networking
- [cilium](https://cilium.io): Kubernetes Container Network Interface (CNI).
- [cert-manager](https://cert-manager.io/docs): Creates SSL certificates for services in my Kubernetes cluster.
- [external-dns](https://github.com/kubernetes-sigs/external-dns): Automatically manages DNS records from my cluster in a cloud DNS provider.
- [ingress-nginx](https://github.com/kubernetes/ingress-nginx): Ingress controller to expose HTTP traffic to pods over DNS.
- [Cloudflared](https://github.com/cloudflare/cloudflared): Cloudflare tunnel client.
### Storage
- [Rook-Ceph](https://github.com/rook/rook): Distributed block storage for peristent storage..
- [Minio](https://min.io/): S3 Compatible Storage Interface.
- [Longhorn](https://longhorn.io/): Cloud native distributed block storage for Kubernetes.
- [NFS](https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner): NFS storage.
### GitOps
- [Flux2](https://github.com/fluxcd/flux2): Declarative Cluster GitOps
- [actions-runner-controller](https://github.com/actions/actions-runner-controller): Self-hosted Github runners.
- [sops](https://toolkit.fluxcd.io/guides/mozilla-sops/): Managed secrets for Kubernetes which are commited to Git.
- [Rennovate](https://github.com/renovatebot/renovate): Automated Cluster Management.
---
## :gear: Configuration
- [Home Assistant](https://github.com/rwlove/home-assistant-config)
- [Node Red](https://github.com/rwlove/node-red-hass-flows)
- [ESPHome](https://github.com/rwlove/esphome_config)
---
## :gear: Hardware
| Hostname | Device | CPU | RAM | OS |Role | Storage | IOT | Network |
| --------- | ----------------- | --- | ------ | -------- | ---------- | ----------------------- | ---------- | ------------ |
| master1 | Intel NUC7PJYH | 4 | 8 GB | CentOS 9 | k8s Master | | | |
| master2 | VM on beast | 3 | 8 GB | CentOS 9 | k8s Master | | | |
| master3 | VM on beast | 3 | 8 GB | CentOS 9 | k8s Master | | | |
| worker1 | ThinkCentre M910x | 8 | 32 GB | CentOS 9 | k8s Worker | longhorn NVMe | Z-Stick 7 | iot/sec-vlan |
| worker2 | ThinkCentre M910x | 8 | 32 GB | CentOS 9 | k8s Worker | longhorn NVMe | | iot/sec-vlan |
| worker3 | ThinkCentre M910x | 8 | 32 GB | CentOS 9 | k8s Worker | longhorn NVMe, ceph osd | Sonoff | iot/sec-vlan |
| worker4 | ThinkCentre M910x | 8 | 32 GB | CentOS 9 | k8s Worker | longhorn NVMe | Coral USB | iot/sec-vlan |
| worker5 | VM on beast | 10 | 24 GB | CentOS 9 | k8s Worker | longhorn NVMe, ceph osd | | iot/sec-vlan |
| worker6 | VM on beast | 10 | 24 GB | CentOS 9 | k8s Worker | longhorn NVMe, ceph osd | skyconnect | iot/sec-vlan |
| worker7 | VM on beast | 10 | 24 GB | CentOS 9 | k8s Worker | longhorn NVMe, ceph osd | | iot/sec-vlan |
| worker8 | VM on beast | 10 | 48 GB | CentOS 9 | k8s Worker | longhorn NVMe, ceph osd | nVIDIA P40 | iot/sec-vlan |
## Network
Click to see a high level physical network diagram
| Name | CIDR | VLAN | Notes |
|------------------------------------------------|----------------------------| ---- | ----- |
| Management VLAN | | | TBD |
| Default | `192.168.0.0/16` | 0 | |
| IOT VLAN | `10.10.20.1/24` | 20 | |
| Guest VLAN | `10.10.30.1/24` | 30 | |
| Security VLAN | `10.10.40.1/24` | 40 | |
| Kubernetes Pod Subnet (Cilium) | `10.42.0.0/16` | N/A | |
| Kubernetes Services Subnet (Cilium) | `10.43.0.0/16` | N/A | |
| Kubernetes LB Range (CiliumLoadBalancerIPPool) | `10.45.0.1/24` | N/A | |
## ☁️ Cloud Dependencies
| Service | Use | Cost |
|-------------------------------------------------|-------------------------------------------------------------------|------------------|
| [1Password](https://1password.com/) | Secrets with [External Secrets](https://external-secrets.io/) | ~$65 (1 Year) |
| [Cloudflare](https://www.cloudflare.com/) | Domain | Free |
| [GitHub](https://github.com/) | Hosting this repository and continuous integration/deployments | Free |
| [Mailgun](https://www.mailgun.com/) | Email hosting | Free (Flex Plan) |
| [Pushover](https://pushover.net/) | Kubernetes Alerts and application notifications | $10 (One Time) |
| [Frigate Plus](https://plus.frigate.video/) | Model training services for Frigate NVR | $50 (1 Year) |
| | | Total: ~$9.60/mo
---
### Noteworthy Documentation
[Initialization and Teardown](https://rwlove.github.io/home-ops/init_teardown.html)
[Github Webhook](https://rwlove.github.io/home-ops/github_webhook.html)
[Limits and Requests Philosophy](https://rwlove.github.io/home-ops/limits.html)
[Debugging](https://rwlove.github.io/home-ops/debugging.html)
### Home-Ops Search
[@whazor](https://github.com/whazor) created [this website](https://nanne.dev/k8s-at-home-search/) as a creative way to search Helm Releases across GitHub. You may use it as a means to get ideas on how to configure an applications' Helm values.