New Homelab
August 18, 2026
I have finally set up my website properly, something I’ve been meaning to do for a while.
I’m now hosting this via K8s, hosted on a smaller plan with a x2 2GB memory nodes. The setup is overkill, but it allows me to scale as necessary.
Technologies #
| Layer | Technology | Key Responsibility |
|---|---|---|
| Ingress & Security | Cloudflare Tunnel + Access | Zero open inbound firewall ports; identity-aware SSO protection (@conordot.com) |
| Source of Truth | GitHub (conordot/kubernetes) | All infrastructure and application state is stored declaratively as code |
| Deployment Engine | Argo CD (AppProject) | Continuous GitOps reconciliation, RBAC isolation, and policy enforcement |
| Runtime & Compute | UpCloud Managed Kubernetes | Isolated VPC cluster hosting workloads in dedicated namespaces (blog) |
Diagram #
The below images were generated using an LLM -> Mermaid, and modified using Excalidraw. Excuse any mistakes as a result.
Showcases the ingress and access pattern through CloudFlare tunnels to my private cluster in UpCloud.
Showcases the GitOps workflow using ArgoCD, Github + GitHub Actions, and Github Container Registry.
Showcases the current runtime in the cluster with this blog.
Next steps #
I plan on implementing or exploring:
- Implementing an open-source SIEM tool and CSPM platform.
- Play around with OpenAI/Gemini -> New posts on this website.
- A new monitoring stack.
- A new FaaS setup, with remote execution.
- Trusted execution environment setups.