Skip to content

Home Operations

This repository holds a GitOps-managed Kubernetes home infrastructure (Talos OS → Kubernetes → Flux). The docs are a compact reference for how the pieces fit together and where to look when something breaks.

Quick Navigation

Architecture at a glance

graph TB
    A[Talos OS] --> B[Kubernetes Cluster]
    B --> C[Flux CD GitOps]
    C --> D[Applications]

Use the repository as the source of truth: push changes to Git, then reconcile with Flux. For design details and templates, see the talos/ and bootstrap/ folders.

What's in the cluster

  • Media & automation: Plex/Jellyfin, Sonarr, Radarr, Prowlarr, qBittorrent
  • Databases: CNPG (Postgres), Dragonfly (Redis-compatible cache)
  • Core infra: Cilium, Rook-Ceph, Envoy Gateway, Cloudflared, cert-manager
  • Observability: Prometheus, Grafana, Fluent-bit, Gatus

Key practices

  • GitOps: repo is the single source of truth; use Flux for reconciliation
  • Backups: VolSync + Restic for critical PVCs
  • Secrets: managed with ExternalSecrets (aKeyless) and cluster-secrets
  • Access: Authentik provides SSO; external access via Cloudflared + Envoy

Need help?

External Resources

```