mirror of
https://github.com/khuedoan/homelab.git
synced 2025-07-22 22:00:46 +07:00
b98060294d
Replaced by Woodpecker CI. It turns out I don't need that much power from Tekton's flexibility, so it's not worth the maintenance overhead for my specific use case at home.
91 lines
2.7 KiB
Markdown
91 lines
2.7 KiB
Markdown
# Roadmap
|
|
|
|
!!! info
|
|
|
|
Current status: **ALPHA**
|
|
|
|
## Alpha requirements
|
|
|
|
Literally anything that works.
|
|
|
|
## Beta requirements
|
|
|
|
Good enough for tinkering and personal usage, and reasonably secure.
|
|
|
|
- [x] Automated bare metal provisioning
|
|
- [x] Controller set up (Docker)
|
|
- [x] OS installation (PXE boot)
|
|
- [x] Automated cluster creation (k3s)
|
|
- [x] Automated application deployment (ArgoCD)
|
|
- [x] Automated DNS management
|
|
- [x] Initialize GitOps repository on Gitea automatically
|
|
- [x] Observability
|
|
- [x] Monitoring
|
|
- [x] Logging
|
|
- [ ] Alerting
|
|
- [x] SSO
|
|
- [ ] Reasonably secure
|
|
- [x] Automated certificate management
|
|
- [x] Declarative secret management
|
|
- [ ] Replace all default passwords with randomly generated ones
|
|
- [x] Expose services to the internet securely with Cloudflare Tunnel
|
|
- [x] Only use open-source technologies (except external managed services in `./external`)
|
|
- [x] Everything is defined as code
|
|
- [ ] Backup solution (3 copies, 2 seperate devices, 1 offsite)
|
|
- [ ] Define [SLOs](https://en.wikipedia.org/wiki/Service-level_objective):
|
|
- [ ] 70% availability (might break in the weekend due to new experimentation)
|
|
- [x] Core applications
|
|
- [x] Gitea
|
|
- [x] Woodpecker
|
|
- [x] Private container registry
|
|
- [x] Homepage
|
|
|
|
## Stable requirements
|
|
|
|
Can be used in "production" (for family or even small scale businesses).
|
|
|
|
- [x] A single command to deploy everything
|
|
- [x] Fast deployment time (from empty hard drive to running services in under 1 hour)
|
|
- [ ] Fully _automatic_, not just _automated_
|
|
- [x] Bare-metal OS rolling upgrade
|
|
- [x] Kubernetes version rolling upgrade
|
|
- [x] Application version upgrade
|
|
- [ ] Encrypted backups
|
|
- [ ] Secrets rotation
|
|
- [x] Self healing
|
|
- [ ] Secure by default
|
|
- [ ] SELinux
|
|
- [ ] Network policies
|
|
- [ ] Static code analysis
|
|
- [ ] Chaos testing
|
|
- [x] Minimal dependency on external services
|
|
- [ ] Complete documentation
|
|
- [x] Diagram as code
|
|
- [x] Book (this book)
|
|
- [ ] Walkthrough tutorial and feature demo (video)
|
|
- [x] Configuration script for new users
|
|
- [ ] SLOs:
|
|
- [ ] 99,9% availability (less than 9 hours of downtime per year)
|
|
- [ ] 99,99% data durability
|
|
- [ ] Clear upgrade path
|
|
- [ ] Additional applications
|
|
- [ ] Matrix with bridges
|
|
- [ ] VPN server
|
|
- [ ] PeerTube
|
|
- [x] Seafile
|
|
- [x] Blog
|
|
- [ ] [Development dashboard](https://github.com/khuedoan/homelab-backstage)
|
|
|
|
## Unplanned
|
|
|
|
Nice to have
|
|
|
|
- [ ] Addition applications
|
|
- [ ] Mail server
|
|
- [ ] Air-gap install
|
|
- [ ] Automated testing
|
|
- [ ] Security audit
|
|
- [ ] Serverless ([Knative](https://knative.dev))
|
|
- [ ] Cluster API ([last attempt](https://github.com/khuedoan/homelab/pull/2))
|
|
- [ ] Split DNS (requires a better router)
|