Platform Services

Platform Services

Application and platform services for the AORXI homelab: internal DNS via Technitium VMs, OpenBao secrets management, the UniFi OS Server controller, Kafka and database operations patterns, container build infrastructure, and certificate management via Let's Encrypt DNS-01 and step-ca.

Platform services sit above the core compute, storage, and networking layers. They include internal DNS, secrets management, the UniFi controller, Kafka and database patterns, container build infrastructure, and certificate management.

DNS VMs

Technitium inventory, zone authority, AXFR replication, RFC 2136 updates, and firewall policy.

DNS Deployment & Cutover

Install the four DNS VMs, form the cluster, create zones, enable TSIG updates, and cut clients over from Unbound.

Secrets: OpenBao

Per-site OpenBao instances, bao-first consumers, break-glass fallback, unseal, and DR boundaries.

UniFi OS Server Controller

Central controller placement, device scope, adoption reachability, and decided-versus-open operations.

Kafka & Databases

Kafka blue/green migration, ordered processing, and PostgreSQL performance patterns.

Container Infrastructure

Docker Compose and architecture constraints for build and remote-management tooling.

CA & Certificate Inventory

Issuer boundaries, certificate inventory, network policy, and deployment order.

Public ACME Runbook

Let's Encrypt DNS-01 for OPNsense, Proxmox, PBS, and Kubernetes.

Private step-ca Runbook

Private CA deployment, IPMI certificates, trust distribution, renewal, and recovery.

Machine & Cluster Networks

Network allocations for Kubernetes and OpenShift clusters: VLAN 40 node networks, per-cluster /22 machine networks for up to three OpenShift clusters per site, and pod/service CIDR rules.

DNS VMs (Technitium)

Architecture reference for the four Technitium DNS VMs: placement, addresses, zone replication, RFC 2136 updates, and firewall rules.