Skip to content


beryl  kubernetes  calico  flux  sops  gitops  bytebase  gateway  nginx  nginx-gateway-fabric  certmanager  gitlab  gitlab-runner  cicd  minio  s3  monitoring  kube-prometheus  prometheus  alertmanager  grafana  node-exporter  memcached  loki  promtail  operator  keycloak  postgres  testbed  homelab  cilium  hlv3  ha  etcd  proxmox  cloud-init  fluxcd  cert-manager  encryption  longhorn  llm  open-webui  mcp  freenginx  mercurial  tls  tls passthrough  tls offload 


building homelab-v2 part 2

Table of Content

building homelab-v2 part 2

  • [x] completed
    • kubeadm init
    • setup gitops
    • setup sops
  • [ ] what's next
    • setup directpv for persistent volumes
    • setup metallb for L2 advertisement of a service and IP address pool
    • setup nginx-gateway-fabric
    • setup cert-manager
    • setup minio
    • setup gitlab-runner
    • setup prometheus
    • setup loki
    • setup postgres
    • create deploy token and database env secrets for news-logger
    • add news-logger app
    • setup bytebase
      • manage news-logger database

I just followed how I did before...

One minor thing to note is that I run below instead of writing secret yaml using stringData when setting up cert-manager.

kubectl create secret generic cloudflare-api-token-secret -n gateway \
  --from-literal=api-token=token_string_here \
  --dry-run=client -o yaml > cloudflare-api-token-secret.yaml