Reading view

End-to-end guide: exposing a K3s cluster with Traefik, cert-manager, CloudFlare and DDNS

I recently set up a Raspberry Pi 5 running K3s and wanted to make a few things accessible from outside my home network like my blog and other services.

I have documented the whole process, including some of the issues I ran into and how I solved them for:

  • Dynamic DNS via Cloudflare for a stable hostname
  • Traefik as the Kubernetes ingress controller
  • cert-manager with Let's Encrypt for automated TLS
  • A residential internet connection with a dynamic public IP
  • Router port forwarding for secure service exposure
  • A K3s cluster running on Raspberry Pi hardware

I'm curious how others are handling remote access to their homelabs. For personal use or deploying web services. Are you exposing services directly with HTTPS, using a VPN (Tailscale/WireGuard), Cloudflare Tunnel, or something else?

Article: https://thethoughtprocess.xyz/en/series/home-server/deploy-kubernetes-internet-dynamic-dns-https

Feedback and suggestions are welcome.

submitted by /u/Kindly-Hawk to r/selfhosted
[link] [comments]
❌