GitOps for a single-node Talos Kubernetes cluster running as a VM on my TrueNAS NAS (with an NVIDIA GPU passed through).
- Talos node config:
clusters/main/talos(talhelper, seemise run talos:genconfig) - Kubernetes and all apps:
clusters/main/kubernetes, deployed by FluxCD - Public DNS:
terraform/cloudflare(Terraform, SOPS-encrypted state) - Updates: Renovate opens PRs, reviewed and merged by hand for anything risky
- Tools:
mise install, thenmise taskslists the helpers (validate, talos:*, tf, cluster:bootstrap, sops:check)
AGENTS.md is the detailed guide: layout, conventions, secrets, operations notes and disaster recovery.