This repository contains Kubernetes manifest files for a comprehensive self-hosted platform running 40+ applications across various categories. This infrastructure was created for the migration from Docker to Kubernetes (K3S).

Overview

This infrastructure provides a complete solution for:

Media management and streaming
AI/ML workloads
Development and CI/CD workflows
Productivity and collaboration tools
Network and system administration
Storage and backup solutions

All applications are managed using GitOps principles with ArgoCD and utilize cert-manager for automated TLS certificate management.

Repository Structure

The repository is organized with one directory per application, containing all necessary Kubernetes resources:

├── argocd/              # GitOps continuous deployment
├── cert-manager/        # TLS certificate management
├── metallb/             # Load balancer
├── kubevip/             # High availability
├── longhorn/            # Distributed storage
├── cloud-native-postgres/ # PostgreSQL operator
├── envoy-gateway/       # Kubernetes Gateway API configuration
├── infisical/           # Secrets management
├── authentik/           # Identity provider and SSO
├── it-tools/            # IT utilities
├── jellyfin/            # Media server
├── seerr/               # Media request management
├── immich/              # Photo and video management
├── minecraft/           # Game servers
├── gitea/               # Git service
├── harbor/              # Container registry
├── jenkins/             # CI/CD automation
├── n8n/                 # Workflow automation
├── react-resume/        # Resume builder application
├── passbolt/            # Password manager
├── wikijs/              # Documentation wiki
├── zipline/             # File sharing
├── gotify/              # Push notification server
├── ntfy/                # Push notifications
├── bentopdf/            # PDF conversion
├── excalidraw/          # Whiteboard / diagramming
├── searxng/             # Privacy-respecting search engine
├── uptime-kuma/         # Uptime monitoring
├── openwebui/           # Web UI for AI models
├── ollama/              # Local LLM runner
├── comfyui/             # Stable Diffusion workflow UI
├── stable-diffusion/    # Image generation
├── minio-aistor/        # S3-compatible object storage
├── databasus/           # Database management
├── netbootxyz/          # Network boot service
├── technitium/          # DNS server
├── azure-ddns-python/   # Dynamic DNS updater
├── victoria-metrics/    # Metrics and monitoring
├── proxmox/             # Virtualization platform
├── unifi/               # Network controller
└── truenas/             # Storage system

Common Patterns

Networking

Ingress Controller: Envoy Gateway (Kubernetes Gateway API)
TLS: Automated certificate management via cert-manager
DNS: Certificate validation through Azure DNS
Domain: *.jsme.be
Load Balancer: MetalLB for external access

Storage

Persistent Storage: Longhorn distributed storage
StatefulSets: Used for applications requiring persistent state
PersistentVolumeClaims: Separate PVCs for different data types (config, data, backups)

Security

Secrets Management: Kubernetes Secrets for sensitive data
Network Policies: Application isolation where configured
RBAC: Role-based access control for ArgoCD and service accounts
TLS: All web interfaces secured with HTTPS
SSO: Authentik for centralized authentication

Application Architecture

Multi-tier Applications: Separate deployments for apps and databases
Database Pattern: PostgreSQL via Cloud Native Postgres operator as backend
Configuration Management: ConfigMaps for application settings
Service Discovery: ClusterIP services with internal DNS

Deployment

This repository is designed for GitOps deployment using ArgoCD:

ArgoCD monitors this repository for changes
Changes are automatically synced to the cluster
Applications are deployed with declarative configurations
Rollbacks are possible through Git history

Documentation

Each application directory contains a detailed README.md with:

Application description and purpose
Configuration details
Resource specifications
Setup instructions
Integration notes

Refer to individual application READMEs for specific information.

Infrastructure Requirements

Kubernetes Cluster: K3S v1.33+
Storage: Longhorn distributed storage
Load Balancer: MetalLB configured
DNS: Azure DNS for certificate validation
Domain: jsme.be with wildcard DNS records

Maintenance

GitOps: All changes made through Git commits
Certificate Renewal: Automated via cert-manager
Backups: Application-specific backup strategies (see individual READMEs)
Updates: Managed through image tag updates in manifests

README.md

Kubernetes Manifests Repository

Overview

Repository Structure

Categories

Core Infrastructure

Media & Entertainment

AI & Machine Learning

Development & CI/CD

Productivity & Collaboration

Administration & Monitoring

External Service Integration