A lightweight internal developer platform — GitOps from day one, HTTPS by default, and one annotation between public, private, and protected. No cloud lock-in.
A single POSIX script brings up k3s + ingress on any Linux box. Idempotent, no dependencies.
Flux reconciles a Git repo continuously. Push to deploy; drift is auto-corrected.
Wildcard Let's Encrypt certs via Cloudflare DNS-01. Every app is TLS from the first request.
Public, private, or auth-gated — switched per app with a single Ingress annotation.
Start on one VPS, add nodes over a private mesh later. Real Kubernetes, tiny footprint.
SOPS + age encrypt secrets at rest. Everything versioned, nothing leaked.