Kubernetes-Manifests/README.md

Kubernetes Manifests Repository

This repository contains Kubernetes manifest files for a comprehensive self-hosted platform running 40+ applications across various categories. This infrastructure was created for the migration from Docker to Kubernetes (K3S).

Overview

This infrastructure provides a complete solution for:

• Media management and streaming
• AI/ML workloads
• Development and CI/CD workflows
• Productivity and collaboration tools
• Network and system administration
• Storage and backup solutions

All applications are managed using GitOps principles with ArgoCD and utilize cert-manager for automated TLS certificate management.

Repository Structure

The repository is organized with one directory per application, containing all necessary Kubernetes resources:

├── argocd/              # GitOps continuous deployment
├── cert-manager/        # TLS certificate management
├── metallb/             # Load balancer
├── kubevip/             # High availability
├── longhorn/            # Distributed storage
├── cloud-native-postgres/ # PostgreSQL operator
├── envoy-gateway/       # Kubernetes Gateway API configuration
├── infisical/           # Secrets management
├── authentik/           # Identity provider and SSO
├── it-tools/            # IT utilities
├── jellyfin/            # Media server
├── seerr/               # Media request management
├── arrstack/            # Media automation (Radarr/Sonarr)
├── immich/              # Photo and video management
├── minecraft/           # Game servers
├── gitea/               # Git service
├── harbor/              # Container registry
├── jenkins/             # CI/CD automation
├── n8n/                 # Workflow automation
├── react-resume/        # Resume builder application
├── passbolt/            # Password manager
├── wikijs/              # Documentation wiki
├── zipline/             # File sharing
├── gotify/              # Push notification server
├── ntfy/                # Push notifications
├── bentopdf/            # PDF conversion
├── excalidraw/          # Whiteboard / diagramming
├── searxng/             # Privacy-respecting search engine
├── uptime-kuma/         # Uptime monitoring
├── openwebui/           # Web UI for AI models
├── ollama/              # Local LLM runner
├── comfyui/             # Stable Diffusion workflow UI
├── stable-diffusion/    # Image generation
├── minio-aistor/        # S3-compatible object storage
├── databasus/           # Database management
├── netbootxyz/          # Network boot service
├── technitium/          # DNS server
├── azure-ddns-python/   # Dynamic DNS updater
├── victoria-metrics/    # Metrics and monitoring
├── proxmox/             # Virtualization platform
├── unifi/               # Network controller
└── truenas/             # Storage system

Categories

Core Infrastructure

• ArgoCD: GitOps continuous deployment and application management
• cert-manager: Automated TLS certificate provisioning using Azure DNS
• MetalLB: Bare-metal load balancer (IP pool: 10.8.11.100-10.8.11.150)
• KubeVIP: High-availability control plane
• Longhorn: Distributed block storage
• Cloud Native Postgres: PostgreSQL operator for database management
• Envoy Gateway: Kubernetes Gateway API implementation
• Infisical: Secrets management platform
• Authentik: Identity provider and SSO

Media & Entertainment

• Jellyfin: Media streaming server
• Seerr: Media request and discovery
• Arrstack: Automated media management (Radarr for movies, Sonarr for TV)
• Immich: Self-hosted photo and video management
• Minecraft: Game servers (ATM-10 and Stacia 2 Expert modpacks)

AI & Machine Learning

• Ollama: Local LLM runner
• Open WebUI: Web interface for AI models
• ComfyUI: Stable Diffusion workflow UI
• Stable Diffusion: AI image generation

Development & CI/CD

• Gitea: Self-hosted Git service with container registry
• Harbor: Enterprise container registry
• Jenkins: Automation server for CI/CD pipelines
• n8n: Workflow automation platform
• MinIO AIStor: S3-compatible object storage

Productivity & Collaboration

• React-Resume: Resume builder with MinIO and PostgreSQL
• Passbolt: Team password manager
• Wiki.js: Modern documentation platform
• Zipline: File sharing and screenshot service
• Gotify: Push notification server with REST API and WebSocket support
• Ntfy: Push notification service
• BentoPDF: PDF conversion service
• Excalidraw: Online whiteboard and diagramming tool
• SearXNG: Privacy-respecting metasearch engine
• Databasus: Database management UI
• Uptime Kuma: Uptime and status monitoring

Administration & Monitoring

• IT-Tools: Collection of useful IT utilities
• Technitium: DNS server with web interface
• Azure DDNS Python: Dynamic DNS updater for Azure DNS
• NetbootXYZ: Network boot service for OS installation
• VictoriaMetrics: Metrics collection and monitoring stack

External Service Integration

• Proxmox: Virtualization platform integration
• UniFi: Network controller integration
• TrueNAS: Storage system integration

Common Patterns

Networking

• Ingress Controller: Envoy Gateway (Kubernetes Gateway API)
• TLS: Automated certificate management via cert-manager
• DNS: Certificate validation through Azure DNS
• Domain: *.jsme.be
• Load Balancer: MetalLB for external access

Storage

• Persistent Storage: Longhorn distributed storage
• StatefulSets: Used for applications requiring persistent state
• PersistentVolumeClaims: Separate PVCs for different data types (config, data, backups)

Security

• Secrets Management: Kubernetes Secrets for sensitive data
• Network Policies: Application isolation where configured
• RBAC: Role-based access control for ArgoCD and service accounts
• TLS: All web interfaces secured with HTTPS
• SSO: Authentik for centralized authentication

Application Architecture

• Multi-tier Applications: Separate deployments for apps and databases
• Database Pattern: PostgreSQL via Cloud Native Postgres operator as backend
• Configuration Management: ConfigMaps for application settings
• Service Discovery: ClusterIP services with internal DNS

Deployment

This repository is designed for GitOps deployment using ArgoCD:

1. ArgoCD monitors this repository for changes
2. Changes are automatically synced to the cluster
3. Applications are deployed with declarative configurations
4. Rollbacks are possible through Git history

Documentation

Each application directory contains a detailed README.md with:

• Application description and purpose
• Configuration details
• Resource specifications
• Setup instructions
• Integration notes

Refer to individual application READMEs for specific information.

Infrastructure Requirements

• Kubernetes Cluster: K3S v1.33+
• Storage: Longhorn distributed storage
• Load Balancer: MetalLB configured
• DNS: Azure DNS for certificate validation
• Domain: jsme.be with wildcard DNS records

Maintenance

• GitOps: All changes made through Git commits
• Certificate Renewal: Automated via cert-manager
• Backups: Application-specific backup strategies (see individual READMEs)
• Updates: Managed through image tag updates in manifests