Sanitized Kubernetes configurations from a home infrastructure setup shared for community reference.
🚧 This repository is automatically synchronized from a private repository. Manual changes will be overwritten.
This repository contains Kubernetes manifests managed with GitOps principles using Flux CD. The configurations support:
- Media Services: Automated media management and streaming
- Home Automation: Smart home integrations
- Monitoring & Observability: Prometheus, Grafana, Loki
- Authentication: OAuth2 Proxy, Authelia
- Storage: Rook-Ceph distributed storage
- Networking: Cilium CNI with Gateway API
- Cluster: K3s on bare-metal nodes
- GitOps: Flux CD for automated reconciliation
- Secrets: 1Password External Secrets Operator
- DNS: CoreDNS with custom configurations
- Ingress: Gateway API with Cilium
kubernetes/
├── shared/ # Shared resources across clusters
│ ├── components/ # Reusable Kustomize components
│ └── repositories/ # Helm/OCI repository definitions
├── clusters/
│ └── home-k3s/ # Main production cluster
│ ├── apps/ # Application deployments
│ ├── config/ # Cluster-specific configuration
│ └── infrastructure/ # Core services
├── flux/ # Flux system components
└── bootstrap/ # Cluster initialization
This repository has been sanitized to remove:
- Personal identity information
- Private IP addresses (non-RFC1918)
- Domain names and hostnames
- Email addresses
- API keys and secrets
- Other sensitive configuration
The sanitization process uses:
- AI-powered analysis (OpenRouter + GPT-4) for intelligent redaction
- Regex-based privacy gate for additional safety checks
Automatic Synchronization: This repository is automatically updated when changes are pushed to the private source repository. The workflow:
- Monitors private repository for changes
- Performs AI-powered sanitization
- Runs privacy gate checks
- Publishes to this public repository (history-less)
This repository serves as a reference for:
- Flux CD GitOps patterns
- Kubernetes security best practices
- Home lab cluster management
- Application deployment patterns
This repository is a reference implementation. Configurations are specific to the source environment and may require adaptation for other clusters. Always:
- Review configurations before applying
- Adjust resource limits for your hardware
- Update domain/network settings
- Manage secrets securely (never commit plaintext secrets)
Inspired by and adapted from the excellent home operations repositories:
See LICENSE for details.
Last Updated: Automated on each sync