Kubernetes Home Cluster

A GitOps-managed Kubernetes cluster powered by TrueCharts ClusterTool, Talos Linux, and Flux CD.

Overview

This repository contains the declarative configuration for a home Kubernetes cluster using:

• Talos Linux - Immutable, secure Kubernetes OS
• Flux CD - GitOps continuous delivery
• SOPS - Secrets encryption with Age
• Renovate - Automated dependency updates

Repository Structure

├── clusters/main/
│   ├── clusterenv.yaml          # Encrypted cluster environment variables
│   ├── talos/                   # Talos Linux configuration
│   │   ├── talconfig.yaml       # Talos cluster config
│   │   └── patches/             # Node-specific patches (GPU, NVIDIA)
│   └── kubernetes/
│       ├── flux-system/         # Flux bootstrap and settings
│       ├── kube-system/         # Core K8s components (Cilium, metrics-server)
│       ├── system/              # Cluster infrastructure
│       ├── networking/          # Ingress controllers (nginx internal/external)
│       ├── core/                # Core services (cert-manager, MetalLB, Blocky)
│       └── apps/                # User applications
├── repositories/                # Helm and Git repository definitions
└── .sops.yaml                   # SOPS encryption rules

System Components

Component	Purpose
Cilium	CNI networking
MetalLB	Load balancer
cert-manager	TLS certificates
Longhorn	Distributed storage
CloudNative-PG	PostgreSQL operator
kube-prometheus-stack	Monitoring
Spegel	P2P image distribution

Applications

Media: Emby, Sonarr, Radarr, Lidarr, Prowlarr, qBittorrent, Ombi, Recyclarr

Home: Home Assistant, Immich, KitchenOwl, Teslamate

Infrastructure: Authentik, Grafana, Vaultwarden, Gitea, Nextcloud, Ollama

Utilities: Homepage, IT-Tools, Blocky (DNS), Cloudflare DDNS

Prerequisites

• ClusterTool CLI
• SOPS with Age key
• kubectl
• Talosctl

Secrets Management

Secrets are encrypted using SOPS with Age. The .sops.yaml file defines encryption rules for:

• clusterenv.yaml - Cluster-wide environment variables
• *.secret.yaml - Kubernetes secrets
• values.yaml - Helm values containing sensitive data

Getting Started

1. Clone this repository
2. Configure your Age key for SOPS decryption
3. Update clusters/main/clusterenv.yaml with your values
4. Deploy Talos nodes using ClusterTool
5. Flux will automatically reconcile the cluster state

License

AGPL-3.0