Skip to content
Homelab
Homelab logo — a roof over a stack of servers

Homelab

Talos Linux on Proxmox, provisioned by Pulumi, run by Argo CD. Bare VMs to running apps — all in code, no manual steps.
Get startedHow it worksGitHub

Homelab architecture

Hover a box to trace its path · click for details

UsersInternet visitorpublic apps onlyVPN useroff-site · NetBirdLAN userhome networkEdge · public internetBifrost edgeHetzner VPSTraefikTLS + routingNetBirdVPN + tunnelAuthentiksingle sign-onGatusuptime pageCloudflare DNSDNS onlyHome lab · Proxmox serverKubernetes clustertalos-cluster · API VIP 192.168.1.210NetBird peertunnel endCilium Gatewaysingle entry pointPlatformArgo CDGitOpsCiliumnetwork + eBPFcert-managerTLSAppsAIOllamaOpen WebUIComfyUIKubeflowObservabilityGrafanaVictoriaMetricsVictoriaLogsOpenTelemetrySecurityFalcoTrivyKyvernoToolsHarborn8nHeadlampCS2 serverCluster servicesLonghornstorageOpenBaoruntime secretsCloudNativePGPostgresNodes — Talos Linux VMs7 VMs · 32 vCPU · 82 GiB RAM · 1 × 16 GB GPUWorkersgeneral appsGPU workerRTX 5070 Ti · 16 GBControl planesetcd + APIHTTPSWireGuard tunnelNetBird mesh*.madhan.appown LB IPHTTP(S) from outside enters through the Gateway; hover any box to trace its pathTrafficManaged by PulumiManaged by Argo CD

Four layers, four tools

Section titled “Four layers, four tools”

Apps

Grafana, Harbor, Ollama, ComfyUI, n8n and more. CDK8s synthesizes manifests; Argo CD syncs them.

Platform

Talos Kubernetes, Cilium with Gateway API, cert-manager, Argo CD. Installed by Pulumi.

Infrastructure

7 Proxmox VMs and the Bifrost edge VPS on Hetzner. Provisioned by Pulumi.

Hardware

One Proxmox host with an NVIDIA GPU passed through to a dedicated worker.

One command per layer

Section titled “One command per layer”
From bare Proxmox to synced cluster
just create-secrets      # bootstrap Secrets from SOPS
just core talos up       # VMs + Talos cluster
just core platform up    # Cilium, cert-manager, Argo CD
just core hetzner up     # Bifrost edge: Traefik, NetBird, Authentik

Argo CD takes it from there. The deploy guide walks every phase.

Start here

Section titled “Start here”
ConceptsTraffic, GitOps and secrets — how the pieces connect.
WorkloadsEvery app, where it runs and how to reach it.
OperateTroubleshooting, repairs and upgrade runbooks.
ReleasesWhat changed in each version.