July 18, 2026

A personal project is a good place to keep infrastructure honest. Every component needs to justify its operational cost, but the system should still be observable, recoverable and reproducible.

This site uses a single-node k3s cluster, Flux for reconciliation, CloudNativePG for the database, and Sealed Secrets for encrypted configuration. Images are built once, scanned, and deployed by digest.

The important part is not the number of tools. It is the boundary between them: CI produces immutable artifacts, Git records the desired state, and the cluster converges on that state without hidden manual steps.

The resulting platform is intentionally small. It leaves room to learn from real production behavior without pretending that complexity is free.