An end-to-end guide to running Kubernetes at home with K3s — single-node and HA setups, ingress, persistent storage with Longhorn, MetalLB, cert-manager with DNS-01, automated upgrades, and a pragmatic path to migrate Docker Compose workloads without overengineering it.
Traefik
-
Kubernetes for the Homelab: K3s from Scratch to Production -
Traefik as a Kubernetes Ingress Controller: The Complete Guide A technically deep guide to running Traefik as a Kubernetes ingress controller — covering Helm installation, IngressRoute CRDs, Middleware resources, TLS with cert-manager, Gateway API, RBAC, high availability, observability, and production-grade patterns including canary deployments, TCP/UDP routing, and ForwardAuth with Authentik.
-
Gateway API: The Future of Kubernetes Ingress The Kubernetes Gateway API replaces Ingress with a role-oriented, expressive API for HTTP routing, traffic splitting, header manipulation, and TCP/gRPC routing. Here's everything you need to migrate.
-
Vaultwarden: Running Your Own Password Manager A complete guide to deploying Vaultwarden — the lightweight Bitwarden-compatible server — with HTTPS via Traefik, automated backups, admin hardening, and migrating from LastPass or 1Password.
-
K3s on Raspberry Pi and Homelab: Lightweight Kubernetes That Actually Works A complete hands-on guide to running K3s on Raspberry Pi hardware and homelab servers — from bare-metal bootstrap to production-grade workloads with ingress, persistent storage, and GitOps deployments.
-
Traefik: The Complete Guide to the Cloud-Native Reverse Proxy A comprehensive deep-dive into Traefik — the modern cloud-native reverse proxy and load balancer. Covers core architecture, Docker auto-discovery with labels, automatic HTTPS via Let's Encrypt, the full middleware ecosystem, routing rules, ForwardAuth and SSO, observability, HTTP/3, and the tips and tricks that make it the go-to proxy for home labs and production Kubernetes clusters alike.