A self-hosted homelab running a production-grade Kubernetes stack at home — identity, mail, storage, automation, home-automation and the websites it hosts, all declared in public GitOps. This is the front door; the deep dive lives in the docs.
Documented end to end, and its building blocks are open source — mirrored to GitHub. Start with the docs, or dig into the code.
Documentation
Architecture, security, storage, networking, operations — the full write-up.
docs.mdapi.chGitOps (Fleet)
The whole Kubernetes platform, declared in public GitOps.
github.com/tillo/fleetmirror
Turnkey public-mirror container: HTTP(S) + FTP(S) + rsync in one image.
github.com/tillo/mirroropennic-tier2
Turnkey OpenNIC Tier 2 DNS server container — BIND9 + auto zone refresh.
github.com/tillo/opennic-tier2certspotter
SSLMate certspotter — a Certificate Transparency monitor — as a container.
github.com/tillo/certspotterjoplin-mcp
HTTP/SSE wrapper around joplin-server-mcp with bearer-token auth.
github.com/tillo/joplin-mcpautoconfig
Multi-domain Thunderbird/Outlook mail autoconfig + autodiscover (Python).
github.com/tillo/autoconfigPublic-interest infrastructure run from the cluster and contributed back to the internet — anti-censorship relays, alternative DNS, a package mirror and public time.
Public mirror
A free, fast mirror for BlackArch, Gentoo, Tails and ArchStrike.
mirror.mdapi.chTor Snowflake
A Snowflake proxy helping people on censored networks reach Tor.
torproject.orgTor WebTunnel bridge
A WebTunnel bridge giving censorship-resistant access to Tor.
torproject.orgOpenNIC DNS
A public resolver for the community-run OpenNIC alternative DNS root.
opennic.orgNTP Pool
A time server contributing to the global pool.ntp.org project.
ntppool.orgFamily & friends get a personalised portal — your apps, plus a marketplace where you can request your own services. Sign in to see what's yours and what you can ask for.