homeserver-deployment
Helm charts for home server deployment using App of Apps strategy with Argo CD orchestration and automated backups via Restic + B2.
Ficha actualizada 23 sept 2026, 7:33 · upstream 23 sept 2026, 7:05 · release sin release detectada
Qué es homeserver-deployment
Descripción editorial construida a partir del repositorio, su documentación y sus señales de mantenimiento.
This repository contains Helm charts organized by the App of Apps pattern, enabling modular management of a homeserver infrastructure. The core services are deployed through Kubernetes manifests that integrate with Vault for secrets management, Homelab-alm for custom resources, and Argo CD for application lifecycle management. A separate mini PC is used to host backup storage via NFSv4 mounts, ensuring data durability while keeping the main server focused on service orchestration.
The deployment architecture separates concerns between core services (Vault, PostgreSQL) and application-specific workloads (Minecraft, Immich, Paperless-ngx). Each chart defines its own configuration, allowing independent updates without affecting other components. Backup jobs are scheduled to run at regular intervals, with data stored in Restic repositories on the mini PC that are mirrored to Backblaze B2 for disaster recovery.
The system is designed for self-hosted home labs where reliability and automation are priorities. All secrets are managed through Vault, eliminating hard-coded credentials. The use of NFS mounts on a dedicated node provides isolated storage for sensitive data while maintaining performance for the primary server.
- Automated deployment of all services via Argo CD with zero-touch setup
- Secure secret management using Vault without exposing passwords in config files
- Backup and restore of game servers (Minecraft) with automated snapshots
- Media library management through Immich with scheduled backups to B2
- Document storage solution using Paperless-ngx with automatic synchronization
- Vaultwarden for encrypted password vaulting on the same infrastructure
- Centralized monitoring and alerting across all home server components
- App of Apps architecture allows independent updates to each application chart without redeploying others
- Vault Secrets Operator enables declarative secret management with automatic reconciliation from Vault
- Restic + B2 backup strategy provides both local redundancy and offsite data protection
- NFS mount on a dedicated mini PC isolates storage concerns from the primary server
- Argo CD manages application lifecycle including rollout, rollback, and health checks
- Backup jobs use concurrency control to prevent overlapping writes during restoration
- Requires manual bootstrap of Vault before Argo CD can manage applications
- NFS mount on the mini PC introduces single point of failure if that node fails
- Restic repository must be accessible from both local and remote storage locations
- Backup restoration requires stopping services to prevent data corruption during restore
- PostgreSQL restore via SQL dump may not fully recover application state without schema migrations
- Vaultwarden backup includes only the vault database, not user passwords stored in the vault
Perfil de infraestructura
Estimación inicial derivada del repositorio y de los servicios detectados.
Despliegue detectado
Qué señales reales de instalación hemos encontrado.
Install Vault first with `helm upgrade vault ./charts/apps/core-services/vault --install`. Then initialize it and populate secrets from Vault. Install Homelab-alm for custom resources. Deploy Argo CD after dependency updates complete. Apply the master application to create Applications for all child apps. Watch for reconciliation events until all services are healthy. For manual changes, use `helm upgrade` with `--create-namespace`. Before enabling backups or restoring data, verify NFS mounts and repository health on the mini PC node.
Stack y dependencias
Componentes inferidos a partir de manifests, configuración y documentación.
Puede sustituir a
Relaciones detectadas por el análisis del repositorio y su categoría.
Experiencia real de la comunidad
Ayuda a contrastar la estimación automática con instalaciones reales.
Todavía no hay datos comunitarios para este proyecto.