Homelab

Using GitOps principals and workflow to manage a lightweight k3s cluster.

Infrastructure

I've used Techno Tim's k3s-ansible playbook to deploy a 6 node (3 masters & 3 workers) cluster across 3 Proxmox hosts, with each host running 2 VMs (1 master node with 4GB RAM/2vCPU and 1 worker node with 8GB RAM/4vCPU).

Servers

1. Proxmox Cluster

Host	Model	CPU	Storage
Beelink S12 Pro	Mini PC	12th gen N100	512GB M.2
Beelink S13	Mini PC	12th gen N150	512GB M.2
Beelink EQ14	Mini PC	12th gen N150	512GB M.2

Each Proxmox host runs:

• 1x Kubernetes master node (4GB RAM, 2vCPU)
• 1x Kubernetes worker node (8GB RAM, 4vCPU)

2. TrueNAS Scale

Description	Spec
Server	SONY VAIO - SVE14126CXB (2012)
RAM	8GB (maxed out)
CPU	Intel i5-3210M
SSD (os)	128GB
SDD	1TB

Beelink mini PCs & TrueNAS server

Setting it up

1. Create flux namespace and the necessary sops secret

export SOPS_AGE_KEY_FILE='<path-to-key.txt>'

make bootstrap0

2. Flux installation

export GITHUB_TOKEN='ghp_XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX'

make bootstrap

Kubernetes Backup

This homelab implements a comprehensive three-tier backup strategy covering databases, application data, and file systems.

Type	Primary	Cloud
PostgreSQL	CNPG Cluster	Cloudflare R2
Volumes	Longhorn Volumes	Cloudflare R2

Database Backups

• Tool: CloudNative-PG (CNPG) operator with Point-in-Time Recovery
• Architecture: 3-replica PostgreSQL cluster for high availability
• Backup: Continuous WAL archiving and base backups to Cloudflare R2
• Recovery: Point-in-Time Recovery (PITR) capability
• Covers: Immich, Movary, Fresh RSS, Vikunja, Speedtest Tracker

Volume Backups (Longhorn)

• Tool: Longhorn volume snapshots and backups
• Schedule: Automated snapshots and backups
• Storage: Longhorn distributed block storage with backups to Cloudflare R2
• Covers: All persistent volumes including SQLite databases, application data, and configuration files

NAS Backups

• Tool: Restic
• Schedule: Daily at 03:00 AM
• Retention: 90 days local
• Storage: External HDD (/home/admin/seagate/backups)

Cloud Sync

• Tool: Rclone → Backblaze B2
• Schedule: Every 2 days at 04:30 AM
• Sources: Personal files (/mnt/mega/aditya), Photos (/mnt/mega/photos)

Recovery

All backup credentials are encrypted with SOPS/Age and managed through GitOps. Recovery procedures involve:

1. Database restores from CNPG Point-in-Time Recovery or replica promotion
2. Volume restores from Longhorn snapshots and backups
3. File system restores using restic restore from local or cloud repositories
4. Application data persistence through Longhorn distributed storage

Requirements

• sops (secrets management)
• age (encryption)
• precommit

---

Resources

• Proxmox Cloud init Template - https://technotim.live/posts/cloud-init-cloud-image/