G

gitops

GitLab Relay - host for various GitLab Features such as:

Workflow Engine (AutoFlow / autocore) GitLab CD Job Router and Runner Controllers GitLab Agent for Kubernetes (agentk) Operational Container Scanning Remote Development (Workspaces)

kform generates Kubernetes manifests from HCL — Terraform's configuration language — with typed variables, real expression syntax, and locals for sharing config across resources.

Skaledheim (SKM) is a modular platform designed to orchestrate distributed services inside a cohesive DevSecOps cluster oriented ecosystem.

My fully-automated DevOps homelab.

A recipe book for ordinary self-hosted applications: typed Nix modules rendered to Argo CD manifests by nixidy. Public recipes, private values.

Bare-metal k3s on NixOS with a declarative nixidy + Argo CD GitOps spine. Holds the mechanism — the host, the spine, tenancy governance — and knows nothing about what kind of apps you run.

🗳️ Votely is a polling web app (React, FastAPI, PostgreSQL) built as a DevOps showcase: the application is the pretext, the delivery platform is the point.

✅ Tests from unit to end-to-end, a GitLab CI pipeline with security gates (gitleaks, Semgrep, Trivy, SBOM), build-once/promote releases, Helm charts for Kubernetes, AWS infrastructure with Terraform, keyless CI access through OIDC, images signed with Cosign and AWS KMS, k3s on EC2 with a disposable server and persistent data, HTTPS with cert-manager and Let's Encrypt, GitOps with Argo CD (staging on every merge, production on release tags, rollback by git revert, Sealed Secrets).

🚧 Next: observability (Prometheus, Grafana).

📖 Documented in English and French.

This is a mirror of my own repo on my own gitlab. Photo is curtesy of: Anik photography - https://www.pexels.com/de-de/foto/nahaufnahme-eines-jungen-samlings-im-wald-37271970/

A Helm chart for WordPress on Kubernetes: PHP-FPM + Nginx, GitOps-native backup/restore, default-deny NetworkPolicies.

GrunLab GitOps using ArgoCD.

OperatorFirst is an open-source, self-hosted observability platform that replaces traditional monitoring with a distributed, verifiable system. It uses edge-deployed probe agents, cryptographically signed results, and multi-node consensus to ensure system health data is accurate and tamper-proof. Designed for operators, it supports Monitoring-as-Code, synthetic browser testing, and deep protocol checks, while remaining fully GitOps-native and extensible through a WASM-based plugin system. https://roxanneardary.com/operatorfirst/

This repo is used to build and publish my Fedora bootc parent image. All my other bootc based images will be a derivative off this one.

GitOps Configuration and documentation of my Kubernetes homelab

Running Flux on CSIRO's DISP: the permissions model, its limitations, and how to avoid long-lived PATs

Defining podman quadlets using Nix. Also supports Materia for GitOps workflows. https://quadnix.projects.tf

Demo backend (Flask + CloudNativePG) for the GitOps lab: SQL migrations on boot, DB credentials delivered from Vault by External Secrets. Built and released by GitLab CI.

GitOps source of truth: Argo CD app-of-apps managing an Istio ambient mesh (Gateway API), CloudNativePG, Vault + External Secrets, Keycloak, MinIO and two demo services. No credentials in git.

Demo frontend (nginx) for the GitOps lab: a guestbook UI that renders whatever the backend API returns. Built and released by GitLab CI (Kaniko + Helm -> OCI).