Homelab k3s “nasty”
DevOps
Context
Personal project: hosting around thirty applications at home with “production” level reliability.
The problem
Applications deployed by hand, scattered secrets, no alerting: every outage was discovered by chance.
My solution
A 2-node k3s cluster run with GitOps (ArgoCD), Vault + External Secrets for secrets, Authentik SSO, Longhorn storage, Harbor registry, Traefik, Prometheus/Alertmanager and ntfy push notifications. Infrastructure in Terraform/Terragrunt and Ansible, with Raspberry Pi backup boxes behind a virtual IP.
Result
Around thirty apps deployed with a simple merge, alerts on my phone in under a minute.