webgrip

Self-hosted homelab & platform engineering — GitOps all the way down.

What's here

Repo	What it is
homelab-cluster	The cluster: Flux + HelmRelease + Kustomize on Talos Linux. Secrets via External Secrets + OpenBao. Full LGTM observability.
workflows	Reusable Forgejo Actions library — `uses: webgrip/workflows/.forgejo/workflows/<name>@main` powers CI across every repo.
infrastructure	Shared infrastructure & service definitions.
renovate-config	Shared Renovate presets for org-wide dependency automation.

How we build

In-cluster Forgejo Actions runners cut releases via semantic-release and push images to a self-hosted Harbor registry. No external CI, no external registry — it all runs on the cluster it deploys to.

Stack

Talos Linux · Kubernetes · Flux CD · Cilium · Longhorn · CloudNativePG · OpenBao · External Secrets · Authentik · Grafana / Prometheus / Loki / Tempo · Harbor · Forgejo

_{Mirror of record: https://forgejo.webgrip.dev/webgrip · GitHub kept as a downstream backup.}