Services

Comprehensive catalog of all services running in the homelab

Service Categories

The homelab runs a diverse set of services organized into functional categories:

Core Infrastructure

Essential services that support the platform and other applications.

Monitoring & Observability

Complete monitoring stack for infrastructure and application metrics.

Security Services

Authentication, authorization, secrets management, and security scanning.

Application Services

User-facing applications and services for various purposes.

Service Architecture

┌─────────────────────────────────────────────────────────────┐
│                    External Access (Internet)                 │
└─────────────────────────┬───────────────────────────────────┘
                          │
┌─────────────────────────┴───────────────────────────────────┐
│                   NGINX Ingress Controllers                   │
│                 External (80/443) & Internal                  │
└─────────────────────────┬───────────────────────────────────┘
                          │
┌─────────────────────────┴───────────────────────────────────┐
│                      Service Mesh                             │
├─────────────┬─────────────┬─────────────┬───────────────────┤
│    Core     │ Monitoring  │  Security   │  Applications     │
│  Services   │   Stack     │  Services   │                   │
├─────────────┼─────────────┼─────────────┼───────────────────┤
│ • ArgoCD    │ • Prometheus│ • Authelia  │ • Home Assistant  │
│ • Cert Mgr  │ • Grafana   │ • Vault     │ • Gitea           │
│ • External  │ • Exporters │ • SOPS      │ • Media Stack     │
│   DNS       │ • Blackbox  │             │ • Bitcoin Core    │
│ • MetalLB   │             │             │ • UniFi           │
└─────────────┴─────────────┴─────────────┴───────────────────┘

Service Discovery

All services are accessible through standardized URLs:

  • External: https://<service>.home.dodwell.us
  • Internal: http://<service>.<namespace>.svc.cluster.local

High Availability

Critical services run with multiple replicas:

  • Ingress controllers (2 replicas)
  • DNS services (2 replicas)
  • Monitoring stack (HA Prometheus)

Resource Allocation

Services are distributed across worker nodes based on:

  • Resource requirements
  • Affinity/anti-affinity rules
  • Storage locality
  • Network requirements

Monitoring Stack

Comprehensive monitoring and observability platform

Service Deployment

Service deployment strategies, GitOps workflows, and automation

Application Services

User-facing applications and services