Epic on schuldt.dev | IT with 💖 and 🚀 from Hamburg

Improved Blog UI

Sun, 12 Apr 2026 00:00:00 +0000

Today I refactored the Blog UI. (No AI was harmed during the making of this style.)

Argocd

Sun, 05 Apr 2026 00:00:00 +0000

Migrated all K8s apps to ArgoCD deployments.

Argocd bootstrap with Helmfile, projects and ApplicationSets, Helm and simple manifest apps… Let the stuff break :D

Telekom peering II

Sat, 21 Mar 2026 00:00:00 +0000

To overcome this stupid Telekom peering (contract will end in August finally), I set up a Hetzner VPS with Wireguard. Totally automated via Terraform and Cloudinit.
I set up my FritzBox to use that Wireguard connection, so every device here at home tunnels the traffic through the VPS.

Also, dnscrypt-proxy is running to use my private Adguard-DNS server. In the end… fast internet and no ads. 🥳

k3s homelab cluster stack III

Tue, 10 Mar 2026 00:00:00 +0000

More great changes to land soon™️. But first need to handle the heavily diverged code.

OS install party on a Wednesday evening

Wed, 04 Mar 2026 00:00:00 +0000

So when I set up my new Netcup server back then, I totally fckd up the filesystem. I am using LVM for a long time, but guess what XFS cannot do. Right… shrink :)
So this evening I reinstalled the server. Luckily, everything I do is IasC. Therefor it took me just an hour to get everything back online.

And while waiting for pipelines to finish, I installed a new Arch Workstation OS. Because.. I use Arch BTW :D

k3s homelab cluster stack II

Sun, 01 Mar 2026 00:00:00 +0000

Following up on my previous post. The cluster stack is published to GitHub. I will improve it gradually and highly appreciate feedback: https://github.com/dschuldt/kubernetes-stack

k3s homelab cluster stack

Thu, 19 Feb 2026 00:00:00 +0000

Have you seen the perfect k8s cluster stack? May I suggest:

# cat helmfile.yaml
repositories:
 - name: bedag
 url: https://bedag.github.io/helm-charts/

 - name: external-dns
 url: https://kubernetes-sigs.github.io/external-dns/

 - name: metrics-server
 url: https://kubernetes-sigs.github.io/metrics-server/

 - name: metallb
 url: https://metallb.github.io/metallb

 - name: headlamp
 url: https://kubernetes-sigs.github.io/headlamp/

 - name: cnpg
 url: https://cloudnative-pg.github.io/charts

 - name: tailscale
 url: https://pkgs.tailscale.com/helmcharts

 - name: longhorn
 url: https://charts.longhorn.io

 - name: rancher-charts
 url: https://charts.rancher.io/


releases:
 - name: argocd
 namespace: argocd
 chart: oci://ghcr.io/argoproj/argo-helm/argo-cd
 createNamespace: true
 values:
 - argocd/values.yaml

 - name: cert-manager
 namespace: cert-manager
 chart: oci://quay.io/jetstack/charts/cert-manager
 createNamespace: true
 values:
 - cert-manager/cert-manager.values.yaml

 - name: cert-manager-issuers
 chart: bedag/raw
 namespace: cert-manager
 disableValidation: true
 values:
 - cert-manager/cert-manager-issuers.values.yaml.gotmpl
 needs:
 - cert-manager/cert-manager

 - name: cilium
 namespace: kube-system
 chart: oci://quay.io/cilium/charts/cilium
 values:
 - cilium/values.yaml.gotmpl

 - name: external-dns
 namespace: external-dns
 chart: external-dns/external-dns
 createNamespace: true
 values:
 - external-dns/external-dns.values.yaml.gotmpl

 - name: external-dns-secrets
 namespace: external-dns
 chart: bedag/raw
 values:
 - external-dns/external-dns-secrets.values.yaml.gotmpl
 needs:
 - external-dns/external-dns

 - name: haproxy-kubernetes-ingress
 namespace: haproxy-controller
 chart: oci://ghcr.io/haproxytech/helm-charts/kubernetes-ingress
 createNamespace: true
 values:
 - haproxy-kubernetes-ingress/haproxy-kubernetes-ingress.values.yaml.gotmpl
 needs:
 - kube-prometheus-stack/kube-prometheus-stack

 - name: haproxy-kubernetes-ingress-config
 namespace: haproxy-controller
 chart: bedag/raw
 values:
 - haproxy-kubernetes-ingress/haproxy-kubernetes-ingress-config.values.yaml
 needs:
 - haproxy-controller/haproxy-kubernetes-ingress

 - name: metrics-server
 namespace: kube-system
 chart: metrics-server/metrics-server
 values:
 - metrics-server/values.yaml
 needs:
 - kube-prometheus-stack/kube-prometheus-stack

 - name: metallb
 namespace: metallb-system
 chart: metallb/metallb
 createNamespace: true
 values:
 - metallb/metallb.values.yaml
 needs:
 - kube-prometheus-stack/kube-prometheus-stack

 - name: metallb-config
 namespace: metallb-system
 chart: bedag/raw
 values:
 - metallb/metallb-config.values.yaml
 needs:
 - metallb-system/metallb
 - kube-prometheus-stack/kube-prometheus-stack

 - name: kube-prometheus-stack
 namespace: kube-prometheus-stack
 chart: oci://ghcr.io/prometheus-community/charts/kube-prometheus-stack
 createNamespace: true
 values:
 - kube-prometheus-stack/kube-prometheus-stack.values.yaml

 - name: kube-prometheus-stack-grafana-dashboards
 namespace: kube-prometheus-stack
 chart: bedag/raw
 values:
 - kube-prometheus-stack/kube-prometheus-stack-grafana-dashboards.values.yaml.gotmpl
 needs:
 - kube-prometheus-stack/kube-prometheus-stack

 - name: headlamp
 namespace: headlamp
 chart: headlamp/headlamp
 createNamespace: true
 values:
 - headlamp/values.yaml

 - name: headlamp-rbac
 namespace: headlamp
 chart: bedag/raw
 values:
 - headlamp/headlamp-rbac.values.yaml.gotmpl
 needs:
 - headlamp/headlamp

 - name: cnpg
 namespace: cnpg-system
 chart: cnpg/cloudnative-pg
 createNamespace: true
 values:
 - cnpg/values.yaml
 needs:
 - kube-prometheus-stack/kube-prometheus-stack

 - name: cnpg-barman-plugin
 namespace: cnpg-system
 chart: cnpg/plugin-barman-cloud
 needs:
 - cnpg-system/cnpg

 - name: sealed-secrets
 namespace: sealed-secrets
 chart: oci://registry-1.docker.io/bitnamicharts/sealed-secrets
 createNamespace: true
 values:
 - sealed-secrets/values.yaml
 needs:
 - kube-prometheus-stack/kube-prometheus-stack

 - name: local-path-provisioner
 namespace: local-path-storage
 chart: git::https://github.com/rancher/local-path-provisioner.git@deploy/chart/local-path-provisioner
 createNamespace: true
 values:
 - local-path-provisioner/values.yaml

 - name: tailscale-operator
 namespace: tailscale
 chart: tailscale/tailscale-operator
 createNamespace: true
 values:
 - tailscale-operator/values.yaml.gotmpl

 - name: longhorn
 namespace: longhorn-system
 chart: longhorn/longhorn
 createNamespace: true
 values:
 - longhorn/values.yaml

 - name: system-upgrade-controller
 namespace: cattle-system
 chart: rancher-charts/system-upgrade-controller
 createNamespace: true

 - name: system-upgrade-controller-plan
 namespace: cattle-system
 chart: bedag/raw
 values:
 - system-upgrade-controller/values.yaml
 needs:
 - cattle-system/system-upgrade-controller

 - name: kured
 namespace: kured
 chart: oci://ghcr.io/kubereboot/charts/kured
 createNamespace: true
 values:
 - kured/values.yaml

Helmfile

Sat, 14 Feb 2026 00:00:00 +0000

On Valentine’s Day seriously fell in love with Helmfile in interaction with bedag/raw.

Maintenance and research

Thu, 05 Feb 2026 00:00:00 +0000

Nothing to crazy happened today. Just patched some servers and did some research on Postgres production configuration values. Damn; quite a lot to research there.

K3s in homelab

Fri, 30 Jan 2026 00:00:00 +0000

K3s is finally running in my homelab like it’s intended to.
Also proxied by Tailscale with impersonation. That is so awesome. -> https://tailscale.com/kb/1437/kubernetes-operator-api-server-proxy

Mozilla HTTP Observatory

Sun, 25 Jan 2026 00:00:00 +0000

Implement best practices security headers. Fck this will break this website for a couple of hours.
-> HTTP Observatory

Edit: Ok, got this pretty quickly. A+ is the reward. Also, .well-known/security.txt added.

Traefik revisited

Sat, 17 Jan 2026 00:00:00 +0000

Today I set up my new server with Traefik again to give it a try. Self configuring services is still a great thing. Built in ACME support, too.

Tailscale

Fri, 16 Jan 2026 00:00:00 +0000

Yesterday I ranted about Telekom - the #@!/% Netzbremse. (Also, see 👉 this website).

This is why I fell in love with my Tailscale exit node setup. Seriously, give it a try. It’s free!

Ansible done right

Thu, 15 Jan 2026 00:00:00 +0000

I forgot how damn good Ansible is, if used correctly.
Implement best practices, adhere to conventions and make use of own Galaxy collections and roles. Scales great and is reliable.

Repo spring cleaning

Tue, 13 Jan 2026 00:00:00 +0000

I archived or deleted a couple of Gitlab repos. Old, shitty, not useful.
As Biggie Smalls said: Never fall in love with your own code… No wait ಠ_ಠ

Monitor all the things

Sun, 11 Jan 2026 00:00:00 +0000

One thing I learned from my profession: Don’t stop in private. My infrastructured is monitored with UptimeRobot.

Heartbeat on my NAS
Heartbeat on my Tailscale home subnet router
Port check on my Teamspeak server
…

Never down… I mean.. the monitoring tool at least.

Lets get this started

Sat, 10 Jan 2026 00:00:00 +0000

I dreamt the other night. Of working stuff and peace of mind. Then my monitoring screamed… service down it seemed ಠಠ