Marcos Rosse

Projects

What each project is and how it is set up, layer by layer. My repositories are self-hosted on a private Forgejo instance; use Request a demo and I’ll walk you through the setup.

Live

Homelab platform

One small server running Incus, managed entirely as code: VMs, networks, a k3s cluster, GitOps apps, tailnet ACLs and hardened app VMs.

Request a demo of Homelab platform
  1. Ubuntu 26.04 LTS + Incus on an i3 / 32 GB mini PC
  2. OpenTofu + Terragrunt: Incus project, sizing profiles, macvlan networks, VMs
  3. Ansible: k3s, hardening, unattended upgrades, app VMs
  4. Flux: Forgejo, Actual Budget, kured, system-upgrade-controller
  5. Tailscale subnet router, ACL policy as code
  • Incus
  • OpenTofu
  • Terragrunt
  • Ansible
  • k3s
  • FluxCD
  • Helm
  • cert-manager
  • Tailscale
  • nftables
  • Renovate
Setup and details of Homelab platform →