Homelab

Ideally there will be nothing here eventually

• K3s install
  • curl -sfL https://get.k3s.io | sh -
• Set nonsudo read permission on default k3s kubeconfig:
  • mkdir ~/.kube/config
  • sudo cp /etc/rancher/k3s/k3s.yaml ~/.kube/config
  • sudo chmod 604 ~/.kube/config/k3s.yaml
  • add to end of bashrc:

    export KUBECONFIG=~/.kube/config/k3s.yaml
    source <(kubectl completion bash)
    alias k=kubectl
    complete -o default -F __start_kubectl k
    

• Install helm
  • Check with helm ls -A

• Terraform provision Cloudflare initial setup
• Terraform SOPS (Secure Operations) provider
• Reserve compute resources for host. Without resources reserved for system, ran into issue where k8s was using too much resources and could not ssh into vps
• Script-based SOPS secret management
• SOPS git pre-commit hook
• Write Ansible k3s setup playbooks
• Setup helm
• Kubernetes setup argoCD
• Kubernetes host Vaultwarden
• Kubernetes setup cert-manager
• Kubernetes backup
  • Velero for etcd and cluster persistent volume backups
  • Terraform provision AWS S3 bucket for backups

• Terraform Atlantis gitops
• Migrate SOPS secret management to a cloud provider
• Prometheus + Grafana Monitoring
  • Kubernetes Cluster
  • Vaultwarden service
• Investigate using TalOS for kubernetes
• Host Static Site
  • Terraform provision AWS cloudfront (use CNAME in cloudflare)
  • Terraform provision S3 bucket to host content from
  • AWS cert manager