Capsule: Multi-Tenancy for Home Lab k3s
Stop handing out cluster-admin access to everyone. Capsule gives k3s lab tenants real namespace isolation without the overhead of spinning up vCluster.
All the articles with the tag "homelab".
Stop handing out cluster-admin access to everyone. Capsule gives k3s lab tenants real namespace isolation without the overhead of spinning up vCluster.
Sealed Secrets vs External Secrets Operator: which Kubernetes secret manager fits your GitOps workflow best, home lab cluster or production multi-tenant setup?
Replace flannel with Cilium 1.19 on k3s for eBPF routing, Hubble observability, WireGuard encryption, and L7 network policies, here's when it pays off.
Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric, home lab server plus cloud VPS, one single kubectl context.
Run real KVM virtual machines as Kubernetes resources on k3s. One control plane for pods and VMs, no more juggling Proxmox alongside your cluster every day.
ClickHouse, DuckDB, or StarRocks for home lab analytics? A practical guide to picking the right OLAP engine for your query patterns without losing the weekend.
How to safely add a NOT NULL column with a live backfill on a 200M-row Postgres table without locking your users out or scheduling any maintenance downtime.
Build a real Postgres 17 HA cluster with Patroni 4.x, etcd 3.5, and HAProxy, fully automatic failover, tested switchover procedure, zero manual babysitting.
DragonflyDB vs Redis 7.4 and Valkey 8.x: architecture deep dive, real performance benchmarks, honest gotchas, and when to swap your cache layer for a dragon.
ntfy is curl-friendly push with iOS. Gotify is self-hosted with web UI. Apprise abstracts 70+ providers. Here's how to wire homelab notifications.
KeyDB forked Redis and shipped multi-threaded I/O and active-active replication years before Redis itself did. Here is whether it is still worth using today.
Postgres table bloat killing your query performance? Compare VACUUM FULL vs pg_repack and learn how to reclaim disk space live without any scheduled downtime.