Kubernetes
Kubernetes in the homelab - Part 05 - Certificates from your own CA and a GUI with Headlamp
cert-manager requesting certificates from step-ca over ACME, Headlamp as the web GUI, and the full list of gotchas from the series.
Network / Security / Sysadmin / DevOps
Network Stuff and System Administration. Sometimes DevOps.
Featured
Highly available Docker apps - Part 04 - Making the apps follow their database
A follower that starts each app where its database is the primary, using Compose profiles in .env, and a file sync with a key that can only do one thing.
Migrating Nextcloud from Ubuntu 24.04 to a fresh Debian 13 server
A new Debian 13 server next to the old Ubuntu one, a rehearsal against the real data without touching it, and a cutover with 9 minutes of downtime.
Get new posts by email
One email per new post.
More posts
All posts →Highly available Docker apps - Part 03 - PostgreSQL with Patroni in Docker
One PostgreSQL 18 image with Patroni for every app: synchronous replication between two sites, the settings that matter, and the commands you need.
9 min readKubernetes in the homelab - Part 04 - Replicated storage with Longhorn
Volumes that survive losing a node: Longhorn on the nodes' own disks, a test volume, and a UI that needs a password it does not have.
8 min readHighly available Docker apps - Part 02 - The witness: WireGuard and a three-member etcd
The referee of the whole setup: a small WireGuard network to a VPS and a three-member etcd across two sites - and the first gotcha, which makes Patroni wait forever.
7 min readKubernetes in the homelab - Part 03 - Getting traffic in with MetalLB and Traefik
Real LoadBalancer addresses on the home network with MetalLB, RKE2's Traefik behind one of them, and a wildcard DNS record for every future application.
5 min readHighly available Docker apps - Part 01 - The plan: two hosts, two sites and a witness
My identity provider, password manager and git server on two Docker hosts at two sites, with automatic failover and no Kubernetes: what HA means here, the pieces, and why a witness.
7 min readKubernetes in the homelab - Part 02 - A highly available control plane with RKE2 and kube-vip
Three RKE2 servers with embedded etcd and one floating address for the Kubernetes API - and a failover test that did not test what I thought it did.
7 min read