Overview

Components

Main components:

• ./infra: bare metal management, Kubernetes, and platform services
• ./apps: user facing applications

Support components:

• ./docs: all documentation go here, this will generate a searchable web UI
• ./tests: automated tests for the entire system

Provisioning flow

After editing the configuration files, run a single just command to:

• (1) Apply the metal and cluster units:
  • Create an ephemeral, stateless PXE server
  • Install NixOS on all servers in parallel
  • Build a Kubernetes cluster (based on k3s)
  • Export and verify its kubeconfig
• (2) Bootstrap GitOps with ArgoCD
• (3) Deploy platform components
• (4) Push the GitOps repo to Forgejo
• (5) Deploy applications in ./apps with ArgoCD

flowchart TD
  subgraph metal[metal]
    pxe[PXE Server] -.-> linux[NixOS Server] --> k3s --> kubeconfig[Verified kubeconfig]
  end

  metal --> argocd[ArgoCD] --> platform
  cloudflare[Cloudflare resources]

  subgraph platform[platform]
    istio[Istio gateways]
    rook-ceph[Rook Ceph]
    cert-manager
    external-dns[External DNS]
    cloudflared
    OpenBao
    Kanidm
    Forgejo
    Woodpecker
    Grafana
  end

  letsencrypt[Let's Encrypt] -.-> cert-manager
  cloudflare -.-> cert-manager
  cloudflare -.-> external-dns
  cloudflare -.-> cloudflared

  subgraph apps[./apps]
    homepage[Homepage]
    budget[Actual Budget]
    drive[OpenCloud]
    matrix[Matrix]
  end

  platform --> sync[Lab setup and GitOps push] --> apps
  cloudflare --> sync
  backup[Backup storage] --> sync
  backup --> velero[Velero]