# Homelab Documentation

> GitOps-driven Kubernetes homelab on bare metal, running Flatcar Container Linux, Kubeadm, Cilium, Rook-Ceph and ArgoCD.

Bare-metal Kubernetes on Flatcar Container Linux. Ansible and a PXE boot
server bring the nodes up; Argo CD owns everything after that. The pages are
reference material: architecture decisions, one page per platform component,
operations runbooks and the contribution workflow.

## Get started

- [Home](<https://homelab.wlkr.ch/index.md>)
- [Core Concepts](<https://homelab.wlkr.ch/concepts/index.md>)
- [Quickstart](<https://homelab.wlkr.ch/quickstart/index.md>)
- [Adapt It to Your Cluster](<https://homelab.wlkr.ch/adapting/index.md>)

## Architecture

- [Architecture](<https://homelab.wlkr.ch/architecture/index.md>)
- [Ansible](<https://homelab.wlkr.ch/architecture/ansible/index.md>)
- [Audit Logging](<https://homelab.wlkr.ch/architecture/audit-logging/index.md>)
- [Boot &amp; Bootstrap Process](<https://homelab.wlkr.ch/architecture/boot-process/index.md>)
- [Design Decisions](<https://homelab.wlkr.ch/architecture/decisions/index.md>)
- [GitOps Strategy](<https://homelab.wlkr.ch/architecture/gitops/index.md>)
- [Known Limitations](<https://homelab.wlkr.ch/architecture/limitations/index.md>)
- [Security Posture](<https://homelab.wlkr.ch/architecture/security/index.md>)

## Platform

- [Platform](<https://homelab.wlkr.ch/platform/index.md>)
- [ArgoCD](<https://homelab.wlkr.ch/platform/argocd/index.md>)
- [Authentik](<https://homelab.wlkr.ch/platform/authentik/index.md>)
- [cert-manager](<https://homelab.wlkr.ch/platform/cert-manager/index.md>)
- [Cilium](<https://homelab.wlkr.ch/platform/cilium/index.md>)
- [CloudNativePG](<https://homelab.wlkr.ch/platform/cloudnative-pg/index.md>)
- [Descheduler](<https://homelab.wlkr.ch/platform/descheduler/index.md>)
- [External DNS](<https://homelab.wlkr.ch/platform/external-dns/index.md>)
- [External Secrets](<https://homelab.wlkr.ch/platform/external-secrets/index.md>)
- [Gateway API](<https://homelab.wlkr.ch/platform/gateway-api/index.md>)
- [GitHub Runners](<https://homelab.wlkr.ch/platform/github-runners/index.md>)
- [Kured](<https://homelab.wlkr.ch/platform/kured/index.md>)
- [Logging](<https://homelab.wlkr.ch/platform/logging/index.md>)
- [Metrics Server](<https://homelab.wlkr.ch/platform/metrics-server/index.md>)
- [Monitoring](<https://homelab.wlkr.ch/platform/monitoring/index.md>)
- [OpenBao](<https://homelab.wlkr.ch/platform/openbao/index.md>)
- [Rook-Ceph](<https://homelab.wlkr.ch/platform/rook-ceph/index.md>)
- [Security Policies](<https://homelab.wlkr.ch/platform/security-policies/index.md>)
- [Tetragon](<https://homelab.wlkr.ch/platform/tetragon/index.md>)
- [Trivy Operator](<https://homelab.wlkr.ch/platform/trivy-operator/index.md>)
- [Velero](<https://homelab.wlkr.ch/platform/velero/index.md>)

## Operations

- [Operations](<https://homelab.wlkr.ch/operations/index.md>)
- [Backups &amp; Recovery](<https://homelab.wlkr.ch/operations/backups/index.md>)
- [Control Plane VIP](<https://homelab.wlkr.ch/operations/control-plane-vip/index.md>)
- [Encryption Key Rotation](<https://homelab.wlkr.ch/operations/encryption-key-rotation/index.md>)
- [Host Firewall Inventory 2026-10-30](<https://homelab.wlkr.ch/operations/host-firewall-inventory-2026-10-30/index.md>)
- [Network Policy Audit 2026-09-27](<https://homelab.wlkr.ch/operations/network-policy-audit-2026-09-27/index.md>)
- [Network Policy Audit 2026-10-16](<https://homelab.wlkr.ch/operations/network-policy-audit-2026-10-16/index.md>)
- [Node Lifecycle](<https://homelab.wlkr.ch/operations/nodes/index.md>)
- [Triage 2026-09-20](<https://homelab.wlkr.ch/operations/triage-2026-09-20/index.md>)
- [Triage 2026-09-29](<https://homelab.wlkr.ch/operations/triage-2026-09-29/index.md>)
- [Troubleshooting](<https://homelab.wlkr.ch/operations/troubleshooting/index.md>)
- [Updates &amp; Upgrades](<https://homelab.wlkr.ch/operations/upgrades/index.md>)
- [Vulnerability Triage](<https://homelab.wlkr.ch/operations/vulnerabilities/index.md>)

## Development

- [Development](<https://homelab.wlkr.ch/development/index.md>)
- [Adding a Platform Component](<https://homelab.wlkr.ch/development/add-platform-component/index.md>)
- [Adding a Workload](<https://homelab.wlkr.ch/development/add-workload/index.md>)
- [Contributing](<https://homelab.wlkr.ch/development/contributing/index.md>)
- [Maintenance](<https://homelab.wlkr.ch/development/maintenance/index.md>)