Projects/active
Homelab as Production
A production-grade Kubernetes platform on a Proxmox homelab, managed entirely as code: GitOps, HA PostgreSQL, SSO, secrets, observability, and CI.
This is the platform the blog series documents. A seven-node Proxmox cluster runs K3s with three control-plane servers and six agents, backed by an external PostgreSQL pair with streaming replication and a keepalived VIP for failover. Everything from VM provisioning to application deployment is managed through code: Terraform with the bpg/proxmox provider and cloud-init for the VMs, Ansible for configuration, FluxCD reconciling the cluster from git.
The platform layer is what makes it production-grade rather than a pile of containers. MetalLB and ingress-nginx with a cert-manager internal CA for LAN access, Tailscale for remote access, Keycloak and OAuth2 Proxy putting SSO in front of every application, 1Password Connect and External Secrets Operator so no secret ever lands in the repository, and kube-prometheus-stack, Loki, and Alertmanager wired up before the first application shipped. A self-hosted Nexus proxies every package ecosystem the cluster consumes, and GitLab runs on the cluster it deploys to.
Every change is a pull request validated by CI, and the whole thing was built over 43 working sessions with Claude Code as the engineering co-pilot, including every failure. The public repository is a sanitized copy of the private one; the series on this site walks through the build in order.