Skip to main content

Anton

Anton is a three-node Kubernetes homelab running Talos Linux. It hosts public applications, private operator services, and time-boxed learning experiments. Flux applies what is committed to Git; these pages explain what the platform provides and how to operate it safely.

Internet access to Anton on three bare-metal nodesInternet clients use HTTPS to Cloudflare. Cloudflare Tunnel carries requests into Anton, where cloudflared and Envoy route them to applications. Three physical Talos Linux nodes power Kubernetes.Anton · KubernetesInternetclientsCloudflarecloudflared→ EnvoyApplicationsThree physical nodes · Talos LinuxNode 1Node 2Node 3
Internet access to Anton on three bare-metal nodesInternet clients reach Cloudflare over HTTPS. A tunnel carries requests to cloudflared and Envoy in Anton, which route to applications. Three bare-metal Talos Linux nodes power Kubernetes.Anton · KubernetesInternet clientsCloudflarecloudflared→ EnvoyApplicationsThree physical nodes · Talos LinuxNode 1Node 2Node 3

Public requests reach applications through Cloudflare Tunnel. The cluster opens the tunnel outbound to Cloudflare, and responses return over that same connection. Inside the cluster, cloudflared hands each request to Envoy Gateway, which routes it to an application.

Start here​

I want to…Read
See what the platform providesCapabilities
Understand how the pieces fitArchitecture
Check health or find a failureRoutine operations
Connect from outside the LANRemote access
Store data or debug a volumeStorage
Know why something was chosenDecisions
Learn from a past incidentRecords

How to read these pages​

Each collection answers a different question, and none of them is a live health check:

  • Guides describe current procedures. They name the checks to run; they do not report results.
  • Decisions explain why a choice was made. Follow supersession links before treating an old decision as current.
  • Records summarize what was established during a dated window, including what stayed uncertain.

A committed manifest shows intent, and an old record shows history. Confirm present behavior against the live cluster.

This site is public. Credentials, private hostnames, detailed inventories, raw evidence, and working plans stay outside it. Shared agent procedures live in the repository's .agents/skills/. Documentation and maintenance explains what belongs where.