#infrastructure

12 posts

CloudNativePG: Running PostgreSQL in Kubernetes Without the Pain

CloudNativePG: Running PostgreSQL in Kubernetes Without the Pain

Running PostgreSQL on Kubernetes with CloudNativePG: the Kyverno policy traps, SSL gotchas, read/write splitting, and the 16.4 segfault to avoid.

Proxmox Backup Server: Incremental Backups for Your Whole Cluster

Proxmox Backup Server: Incremental Backups for Your Whole Cluster

Setting up Proxmox Backup Server for incremental, deduplicated backups across a multi-node cluster, including the token auth and locking gotchas.

Proxmox Cluster Quorum: How Many Nodes Do You Actually Need

Proxmox Cluster Quorum: How Many Nodes Do You Actually Need

Stop guessing about Proxmox quorum. A deep dive into 2-node vs 3-node setups, QDevice, and why your cluster suddenly goes read-only.

Tailscale Subnet Routers: Accessing Your LAN Without the VPN Headache

Tailscale Subnet Routers: Accessing Your LAN Without the VPN Headache

Stop installing Tailscale on every single device. Use a subnet router to expose your home network and IoT gear without traditional VPN complexity.

AdGuard Home: Network-Wide DNS Filtering with Failover

AdGuard Home: Network-Wide DNS Filtering with Failover

Setting up AdGuard Home for network-wide DNS filtering with a robust failover strategy to prevent total internet outages.

Stop Merging Broken YAML: Kubernetes Manifest Validation in CI

Stop Merging Broken YAML: Kubernetes Manifest Validation in CI

Don't let invalid manifests break your GitOps pipeline. Learn how to use kubeconform and Kyverno exclusions to catch errors before they hit production.

cert-manager + Cloudflare DNS-01: Automated TLS for Everything

cert-manager + Cloudflare DNS-01: Automated TLS for Everything

Automating TLS with cert-manager and Cloudflare DNS-01 in Kubernetes

Wildcard DNS + ndots:5: The TLS Nightmare and How to Fix It

Wildcard DNS + ndots:5: The TLS Nightmare and How to Fix It

Kubernetes default DNS settings can cause TLS certificate mismatches when using wildcard DNS. Here is how to debug and fix it.

Self-Improving AI Infrastructure: How Your Homelab Wiki Updates Itself

Self-Improving AI Infrastructure: How Your Homelab Wiki Updates Itself

How to automate your homelab wiki with self-improving AI infrastructure

Building Karpathy's LLM Wiki: A Production Homelab Implementation

Building Karpathy's LLM Wiki: A Production Homelab Implementation

Implementing Karpathy's LLM Wiki in a homelab with real-world lessons and gotchas

Infrastructure as Code, but Automated: OpenTofu and GitHub Actions

Infrastructure as Code, but Automated: OpenTofu and GitHub Actions

Stop manual applies. Learn how to build a production-ready CI/CD pipeline for your infrastructure using OpenTofu and GitHub Actions.

Kubernetes Storage on Bare Metal: Longhorn in Practice

Kubernetes Storage on Bare Metal: Longhorn in Practice

How I configured Longhorn storage for a Kubernetes cluster on bare metal — what worked, what didn't, and what I'd do differently next time.

← All tags