Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

My self-hosting infrastructure, fully automated

github.com

Post reply on HN
Print view View original

91–100 of 228 posts

Re: My self-hosting infrastructure, fully automated

#91

Post by khuedoan »

sandGorgon wrote: post #89
khuedoan wrote: post #47

Repo owner here, I just created this account, I'm a long time HN lurker. I was surprised to find this on Hacker News, I wanted to wait until the stable release before posting on HN, but thank you for posting :) This project is still in alpha stage, but please feel free to critique; I'd appreciate it. Edit 1: After reading some of the comments, I want to clarify a few things: - Because it is currently in the alpha sta…

do you use k3s in production as well ?

Is production == my day job? If so we don't, we use managed Kubernetes (we used to manage our own clusters but they will be decommissioned soon).

Re: My self-hosting infrastructure, fully automated

#92

Post by khuedoan »

akkartik wrote: post #90
khuedoan wrote: post #86

Earlier quoted context omitted.

Yes, I aim to keep the amount of languages and tools I use to a minimum: - For simple scripts, use POSIX sh - For more complex scripts, use Python - For the same sort of task, use only one tool (e.g., only use Ansible for configuration management, don't mix in Puppet or Chef)

Awesome! I was thinking more about the user-facing apps you use. Scanning https://github.com/khuedoan/homelab , Gitea is Go, Grafana is Javascript (approximately), Element is Javascript, Dendrite is Go, Vault is Go. K8s itself is Go. Are you planning to run your own email server? Now I find myself wondering what app choices exist if one were to try to constrain oneself entirely to operating in the Go eco-system, with…

Ah, for user-facing apps I prefer Go or Rust for their performance, although it's not a hard requirement.

Re: My self-hosting infrastructure, fully automated

#93

Post by qbasic_forever »

Very cool, this is like a perfect little kubernetes development environment. The combo of tekton + gitea + k8s is really nice and just a shame it takes bodging all the lego pieces together manually right now. I wish there were a one click exe install like Docker for Desktop that gave people an entire environment like this on their desktop. Like a little private github but so much more powerful.

If you're looking for some nice stuff to develop on an environment like this, check out VS Code and Google's cloud code addon: https://marketplace.visualstudio.com/items?itemName=GoogleCl... It's not totally tied to their GCE cloud offerings and is actually just a VS Code integration of their Skaffold tool (a fantastic inner dev loop tool for k8s). It works great with minikube or any other k8s cluster, presumably this one too. You can very quickly get up and running with code in your IDE now running and debugging on your k8s environment.

Re: My self-hosting infrastructure, fully automated

#94

Post by erulabs »

khuedoan wrote: post #81
erulabs wrote: post #24

Awesome! hajimari is neat, haven't seen that before. I'm building a startup that's trying to put a good chunk of this in a box for folks to buy and plug-n-play self-hosting (as much as that is possible). Since you're running k3s already, you might checkout our templates at https://kubesail.com/templates for more home-hosting apps :)

(Repo owner here) The templates look cool, are those Helm charts underneath? Also I believe the tag filter is malfunctioning: https://kubesail.com/templates-by-tag/Media

Ack, will look at that bug! No, the templates are currently plain YAML with a handle-bars style variable replacement (and a couple other neat tricks). We do support Helm charts tho, I just haven't had time to add them to the "Templates" view. There are loads of good Helm charts here: https://kubesail.com/helm/k8s-at-home

Re: My self-hosting infrastructure, fully automated

#95

Post by khuedoan »

qbasic_forever wrote: post #93

Very cool, this is like a perfect little kubernetes development environment. The combo of tekton + gitea + k8s is really nice and just a shame it takes bodging all the lego pieces together manually right now. I wish there were a one click exe install like Docker for Desktop that gave people an entire environment like this on their desktop. Like a little private github but so much more powerful. If you're looking for…

(Repo owner here) Glad someone mentioned it, I do have one: https://homelab.khuedoan.com/try_on_a_vm

Although it's still incomplete and not one click yet, that's the direction I'm heading in: anyone can try my homelab on their PC, and if they want to use it on their real hardware, they can continue with the full install.

Re: My self-hosting infrastructure, fully automated

#96

Post by christophilus »

pishpash wrote: post #26
extinctpotato wrote: post #8

This is a very good example of how you can save yourself the mental hurdle of remembering how to configure something etc. I can only suspect how much time, trial and error this must've taken. This is my main issue with IaC. The concept really lends itself to any kind of modern infra, however I'm really put off by the sheer amount of time it takes me to whip out a bunch of Ansible playbooks and helper scripts, and on…

Today's stack is way too complex, and fragile. The entire stack relies on the goodwill of other projects to continue to be maintained/not have breaking changes. Even with the initial setup cost s(h)aved there will be a continuous maintenance burden. What you get in abstraction and automation you pay back in babysitting the additional connecting interfaces.

> The entire stack relies on the goodwill of other projects to continue to be maintained/not have breaking changes

I agree with the sentiment of your comment, but when was this ever not the case, other than the days when you built your own OS and tooling from scratch?

Re: My self-hosting infrastructure, fully automated

#97

Post by christophilus »

mikesabbagh wrote: post #79

it amazes me that hacker news run on a single node. All this work is nice and beautiful, the problem will come when you try to update different components.

> it amazes me that hacker news run on a single node.

It amazes me how much of the internet doesn’t run on a single node, when it probably could.

Re: My self-hosting infrastructure, fully automated

#98

Post by citizenpaul »

turtlebits wrote: post #7

This is cool, but are you doing this as learning experience? For a homelab it seems severely overkill. I understand it all being self-hosted, but it could be drastically simpler if you adopt a few SaaS products (using free-tier)

I've been burned too mamy times. Once a product realizes that x% of its free tier uses only feature X they suddenly put that feature behind a paywall. Now I"ve got to research and setup an alternative or pay 20$ for some minor convenice I set it up for.

Most free tiers requires a card on file. I shudder to think at having to check dozens or hundreds of such services regularly to make sure they have not sent out an email about how we are now charging you. Then I don't notice for 6 months and find out I spend $150 on something I could have setup myself in less than an hour that will never charge me.

I have had hundreds of such products subscribed at work. At least every year or so an entire day gets burnt updating credit card info from logging in and looking up the bespoke way every single site requires the updates to be done for payments.

The services that suddenly shut their doors and again require me to research and setup an alternative.

Services get acquired all the time then switch to pay only and they have your CC on file already for easy billing.

Re: My self-hosting infrastructure, fully automated

#100

Post by trulyme »

rwbhn wrote: post #84
aborsy wrote: post #65

Earlier quoted context omitted.

NAT busting is a minus. If apps can create holes in your network and “bust your NAT,” your network is not well secured; you should disable UPnP and filter egress. Also, you gain simplicity but give up to coordination servers, that can be a privacy and security problem.

Tailscale isn't using UPnP. See https://tailscale.com/blog/how-nat-traversal-works/

Sidenote: this is a fantastic writeup.
Post reply on HN