--- permalink: "/index.html" --- BeckCloud

BeckCloud

Built by one. Running for all.

Homelab · K3s · Traefik · Keycloak · 20+ services

20+
Services
K3s
Kubernetes
140+
TiB Storage
2
Nodes

Services

Running on K3s · SSO via Keycloak · TLS via cert-manager

☁
CMS
Directus headless CMS. Admin SSO protected.
cms.becklab.cloud →
★
Affine Wiki
Collaborative workspace. Admin SSO protected.
affine.becklab.cloud →
☰
Bitwarden BSM
Vaultwarden password manager. No SSO.
bw.becklab.cloud →
⚡
Silex
Design tool for landing pages. Admin SSO protected.
silex.becklab.cloud →
📈
Grafana
Dashboards from Prometheus metrics. Admin SSO protected.
grafana.becklab.cloud →
🔬
Hubble
Cilium network observability. Admin SSO protected.
hubble.becklab.cloud →
⚖
Traefik
Reverse proxy & ingress controller dashboard. Admin SSO protected.
traefik.becklab.cloud →
🗃
OpenNebula
Hypervisor management & VM orchestration. Admin SSO protected.
one.becklab.cloud →
◿
Media
Jellyfin, Sonarr, Radarr, Prowlarr, Bazarr, Tdarr & more. Internal only.
Internal network
⚔
Downloads
qBittorrent + Gluetun VPN for torrent downloads. Internal only.
Internal network
🛠
Home Assistant
Smart home automation. Admin SSO protected.
ha.becklab.cloud →
🎨
Game Servers
Crafty Controller. Minecraft servers on NodePort.
:31337

Infrastructure

AlmaLinux 9 → OpenNebula CE 7.2 → Ubuntu 24.04 → K3s v1.32

Hypervisor
AlmaLinux 9 → OpenNebula CE 7.2 AIO → Ubuntu 24.04 VMs
Container Runtime
K3s v1.32.0 → Cilium v1.17 CNI → Traefik v3.4.3 Ingress
GitOps
Flux CD → GitHub → SOPS-encrypted HelmReleases → kustomize
Auth
Keycloak → LLDAP (LDAP) → oauth2-proxy → per-service SSO
Security
Crowdsec WAF (stream mode) → Traefik Bouncer → Trivy Operator
Backups
Velero v1.15.0 → MinIO 200Gi → 6 backup schedules

Status

Everything's running. For now.

✅
Cluster
K3s · Cilium · Traefik · cert-manager — all healthy
✅
SSO
Keycloak · LLDAP · oauth2-proxy — all operational
✅
Backups
Velero · MinIO — last backup OK
✅
TLS
Let's Encrypt · auto-renewal via cert-manager