Homelab Infrastructure Architecture

Hybrid K8s + Docker Compose + OCI Edge Bridge

Users Public Internet OCI Edge (Jump Box) Nginx TLS / Gzip / H2 HAProxy L7 Routing Varnish/Squid Edge Cache HTTPS Tailscale Mesh Homelab LAN (192.168.100.0/24) debian:control-plane Gitea GitOps Source Heimdall App Dashboard Ollama Local LLM API Kubernetes Cluster Traefik Ingress (MetalLB) Web Apps • Website (PHP) • Demos Static • n8n Platform • Argo CD • Prometheus/Grafana Workers • Pimox VMs • Raspberry Pi Storage OpenEBS Hostpath App Path GitOps/SSH Ollama API Legend Frontend/App Backend/Platform OCI Cloud Storage/DB AI/Security

Edge Gateway

  • • TLS termination at OCI Edge
  • • Varnish cache for static HTML
  • • Tailscale tunnel to Homelab LAN

K8s Core

  • • Traefik L7 Ingress via MetalLB
  • • Argo CD GitOps reconciliation
  • • Kyverno supply-chain enforcement

AI & Data

  • • Ollama local LLM on Debian host
  • • Redis translation cache (Website)
  • • OpenEBS local PV retention