Blog
Writing. Infrastructure, and working with AI tools.
Homelab as Production
Building a production-grade Kubernetes platform on a Proxmox homelab over 43 working sessions with Claude Code as the engineering co-pilot: GitOps, HA PostgreSQL, SSO, secrets management, CI/CD, observability, and every failure along the way.
- Series launchI Spent 2-3 Weeks Talking to AI Agents and Getting Nowhere. Then I Built a Production Platform in 2.5 Weeks.
The story behind Homelab as Production — and what I actually learned about working with AI.
- PrefacePreface: Before the Method
Where this project started, and why the tools almost got in the way
- Part 1 of 16The Production Homelab Thesis
Why apply enterprise patterns at home, and why AI makes it viable now
- Part 2 of 16Provisioning Hardware with Terraform and an AI That Made Mistakes
The bpg/proxmox provider, cloud-init, PostgreSQL HA — and the SSH username bug
- Part 3 of 16GitOps from Day One: Bootstrapping FluxCD
Why you set up GitOps before deploying any applications
- Part 4 of 16The Platform Layer Nobody Talks About
MetalLB, ingress-nginx, cert-manager, NFS: the boring infrastructure every app depends on
- Part 5 of 16Observability Before Applications
Why you instrument the cluster before deploying anything else
- RecapFive Posts In: The Foundation Arc
What the first five posts of Homelab as Production are actually about
- Part 6 of 16SSO for Everything: Keycloak and OAuth2 Proxy
Centralizing authentication before you have more than two apps
- Part 7 of 16Secrets Without Secrets: 1Password Connect and External Secrets Operator
Never commit a secret. Ever. The production secrets pattern at homelab scale.
- Part 8 of 16The Application Deployment Pattern
A repeatable 7-manifest pattern (plus kustomization.yaml) that scales to 20+ applications
- Part 9 of 16Nexus — Building Your Own Software Supply Chain
Why your homelab needs a repository manager, and how to build one
- Part 10 of 16Day-2 Operations — HA, Backup, and Rolling Upgrades
The unglamorous work that makes infrastructure actually reliable
- RecapPosts 6-10: The Trustworthy Arc
What the second five posts of Homelab as Production are actually about
- Part 11 of 16CI/CD — Validating Infrastructure as Code
Every PR goes through a pipeline. Here's what that pipeline checks.
- Part 12 of 16GitLab on Kubernetes — 10 PRs to Make It Work
Self-hosted GitLab with Keycloak OIDC, homelab CA TLS, and a K8s runner — and the PR review that caught the mistakes
- Part 13 of 16Three Sessions to Fix OIDC SSO — A Debugging Arc
How a 'simple' SSO integration turned into a JVM truststore, CORS, and a Jetty runtime discovery
- Part 14 of 16What Claude Got Wrong (And Right)
An honest retrospective on 43 sessions of AI-assisted infrastructure work
- Part 15 of 16AI-Assisted Infrastructure for Your Team
Translating the homelab methodology to an engineering innovation team
- Part 15 companionExecutive Summary: AI-Assisted Infrastructure Engineering
A methodology for applying AI assistance safely in engineering teams
- Part 16 of 16Lessons Learned and Future Work
What 43 sessions taught me, and what comes next
- RecapPosts 11-16: The Hard Parts, and What They Revealed
What the final six posts of Homelab as Production are actually about
- BonusThe GPU Passthrough That Wasn't: A Hardware Limitation Story
Sometimes the right answer is that the answer doesn't exist
Tags
- #1password
- #ai
- #ai-assisted
- #ai-assisted-engineering
- #ai-tools
- #ansible
- #backup
- #ci-cd
- #claude
- #cline
- #cloud-init
- #containerd
- #debugging
- #dependency-track
- #devops
- #docker
- #engineering-leadership
- #executive-summary
- #external-secrets
- #external-secrets-operator
- #flux
- #fluxcd
- #future
- #github
- #github-actions
- #gitlab
- #gitops
- #gpu
- #grafana
- #high-availability
- #homelab
- #iac
- #infrastructure
- #infrastructure-as-code
- #ingress-nginx
- #jetty
- #jvm
- #k3s
- #keepalived
- #keycloak
- #kubeconform
- #kubernetes
- #kustomize
- #learning
- #lessons
- #lessons-learned
- #loki
- #meta
- #methodology
- #monitoring
- #nexus
- #nvidia
- #oauth2-proxy
- #observability
- #oidc
- #operations
- #patterns
- #pkce
- #platform-engineering
- #policy-enforcement
- #postgresql
- #prometheus
- #proxmox
- #registry
- #retrospective
- #roadmap
- #secrets
- #security
- #shellcheck
- #sonatype
- #sso
- #supply-chain
- #tailscale
- #team-adoption
- #terraform
- #tflint
- #vfio
- #workflow