homelab
● active · 2025– · Nix
Production-grade Kubernetes, in my house, rebuilt from one Nix flake.
A NixOS-flake-defined k3s cluster run the way I'd run production: GitOps delivery, sealed secrets, a private registry with its own CA, and real monitoring.
- Whole host defined in one NixOS flake, including a custom k3s derivation.
- GitOps with ArgoCD, Argo Workflows and Flux; secrets via sealed-secrets.
- MetalLB + Traefik for load balancing and ingress; Tailscale for remote access.
- Workloads span AI/ML, CI/CD, home automation, monitoring, media, storage and game servers.
- NixOS
- k3s
- ArgoCD
- Argo Workflows
- Flux
- sealed-secrets
- MetalLB
- Traefik