Infrastructure Articles

A streamlined guide to setting up the full stack locally, from secret management with Infisical to running microservices with shared infrastructure.

Revolutionizing cluster operations by replacing kubectl with natural language interaction using the Kubernetes MCP Server.

An end-to-end deployment walkthrough for introducing a new AI service with environment overlays, secret wiring, and production-safe defaults.

Complete guide to deploying our Telegram Bot on Kubernetes, covering Docker builds, Kustomize overlays, secrets management with Infisical, and GitOps with Flux CD.

Building the ultimate developer portal for the home lab. We integrate 'gethomepage', Spotify Backstage, and secure it all with Authelia SSO.

Running a complex microservices stack on limited hardware. How we use .NET 10 Chiseled Ubuntu images and Native AOT to slash memory usage.

A practical cluster setup guide for running AI services alongside traditional backends with reliable data, messaging, and observability.

Deploy and integrate MinIO for S3-compatible object storage with per-user buckets, encryption, and lifecycle policies.

How we use n8n as the 'glue' code for our platform. Empowering low-code automation to handle document notifications, Telegram alerts, and system maintenance tasks.

How to run a full development environment remotely with VS Code, Kubernetes, and a persistent dev container pod.

Exploring the highs of global distribution and the lows of execution limits. A candid look at when to embrace Cloudflare Workers and when to stick with containers.

Safely exposing internal services to the internet without opening inbound ports using cloudflared and Zero Trust access policies.

A comprehensive guide to securing PostgreSQL in a production environment, covering pg_hba.conf, enforced SSL/TLS, RBAC, Row-Level Security (RLS), and credential management with Infisical.

Implementing 'Never Trust, Always Verify' in Kubernetes using Linkerd for mTLS, OIDC for user identity propagation, and Workload Identity for secure service communication.

Manage Kubernetes configurations across environments with Kustomize overlays, patches, and ConfigMap generators.

Learn how to implement GitOps for your Kubernetes cluster using Flux CD, including repository structure, Kustomize overlays, and automated image updates.

Deploy Longhorn for persistent distributed block storage in Kubernetes with replication, snapshots, and disaster recovery.

Stop manually renewing certificates. Set up Cert-Manager to automate Let's Encrypt DNS-01 challenges with Cloudflare.

Configure Traefik as your Kubernetes ingress controller with TLS termination, middleware chains, and IngressRoutes for routing traffic.

Deploy and configure MetalLB for load balancing in bare metal Kubernetes clusters with L2 and BGP modes.

Benchmarking storage tiers for our homelab. Why databases need local NVMe paths while object storage thrives on the NAS.

Securely exposing K8s services like API, MinIO, and databases using Tailscale sidecars and subnet routers for seamless access from anywhere.

A comprehensive guide to hardening your homelab environment using ufw, network segmentation with VLANs, and SSH key-based authentication.

A comprehensive guide to the hardware powering our homelab. From Ryzen processors and 128GB RAM to configuring TrueNAS Scale for Kubernetes storage via iSCSI and NFS.

Why we abandoned the cloud for bare metal. A deep dive into the cost savings, performance gains of 10GbE, and total data sovereignty of running on-premise.