homelab-k8s

Local: Run task check to validate manifests before committing
CI: Automatic checks run on Pull Requests via GitHub Actions

Infrastructure as Code for my homelab kubernetes cluster.

Storage

Longhorn is managed via Flux under k8s/infrastructure/longhorn/.
For operator workflow (including SOPS + age and Cloudflare R2 backups), see specs/002-longhorn-r2-backup/quickstart.md.

This repository includes automated lint and security checks for Kubernetes manifests:

For setup and usage, see docs/k8s-lint-security.md.

This repository uses Renovate for automated dependency updates:

For configuration and manual upgrade procedures, see docs/renovate.md.

Name		Name	Last commit message	Last commit date
Latest commit History 664 Commits
.github/workflows		.github/workflows
docs		docs
grafana-cloud		grafana-cloud
infra/talos		infra/talos
k8s		k8s
specs		specs
.dockerignore		.dockerignore
.gitignore		.gitignore
.sops.yaml		.sops.yaml
.trivyignore		.trivyignore
AGENTS.md		AGENTS.md
CLAUDE.md		CLAUDE.md
LICENSE		LICENSE
README.md		README.md
Taskfile.yaml		Taskfile.yaml
aqua.yaml		aqua.yaml
renovate.json5		renovate.json5
trivy-secret.yaml		trivy-secret.yaml
trivy.yaml		trivy.yaml