khuedoan-homelab/docs/src/roadmap.md

# Roadmap

> Current status: **Alpha**

## Alpha requirements

Literally anything that works.

## Beta requirements

Good enough for tinkering and personal usage, and reasonably secure.

- [x] Automated bare metal provisioning
  - [x] Controller set up (Docker)
  - [x] OS installation (PXE boot)
- [x] Automated cluster creation (k3s)
- [x] Automated application deployment (ArgoCD)
- [x] Automated DNS management
- [x] Initialize GitOps repository on Gitea automatically
- [x] Observability
  - [x] Monitoring
  - [x] Logging
  - [ ] Alerting
- [ ] SSO
- [ ] Reasonably secure
  - [x] Automated certificate management
  - [ ] Declarative secrets management
  - [ ] Replace all default passwords with randomly generated ones
  - [x] Expose services to the internet securely with Cloudflare Tunnel
- [x] Only use open-source technologies (except external managed services in `./external`)
- [x] Everything is defined as code
- [ ] Backup solution (3 copies, 2 seperate devices, 1 offsite)
- [ ] 70% availability (might break in the weekend due to new experimentation)
- [x] Core applications
  - [x] Gitea
  - [x] Tekton
  - [x] Vault
  - [x] Private container registry
  - [x] Homepage

## Stable requirements

Can be used in "production" (for family or even small scale businesses).

- [x] A single command to deploy everything
- [x] Fast deployment time (from empty hard drive to running services in under 1 hour)
- [ ] Fully _automatic_, not just _automated_
  - [x] Bare-metal OS rolling upgrade
  - [x] Kubernetes version rolling upgrade
  - [ ] Application version upgrade
  - [ ] Encrypted backups
  - [ ] Secrets rotation
  - [x] Self healing
- [ ] Secure by default
  - [ ] SELinux
  - [ ] Network policy
- [ ] Static code analysis
- [ ] Chaos testing
- [ ] Minimal dependency on external services
- [ ] Complete documentation
  - [x] Diagram as code
  - [x] Book (this book)
  - [ ] Walkthrough tutorial and feature demo (video)
- [x] Configuration script for new users
- [ ] 99,9% availability (less than 9 hours of downtime per year)
- [ ] 99,99% data durability
- [ ] Additional applications
  - [ ] Matrix with bridges
  - [ ] VPN server
  - [ ] PeerTube
  - [x] Seafile
  - [x] Blog
  - [ ] [Development dashboard](https://github.com/khuedoan/homelab-backstage)

## Unplanned

Nice to have

- [ ] Addition applications
  - [ ] Mail server
- [ ] Air-gap install
- [ ] Automated testing
- [ ] Security audit
- [ ] Serverless (Knative)
- [ ] Cluster API (https://github.com/khuedoan/homelab/pull/2)
- [ ] Split DNS (requires a better router)