The Lab

A live hybrid cloud engineering showcase spanning two continents, three geographic locations — on-premise hardware in Waco TX, Oracle Cloud in Phoenix AZ, and a shell server in Amsterdam NL. Built to demonstrate real DevOps and SRE patterns, not just talk about them.
Live infrastructure status
Homelab
operational
Debian · Docker · K3s master
Waco, Texas · on-premise
Oracle Cloud
operational
ARM Ampere A1 · 2 OCPU 12GB
Phoenix, AZ · K3s worker
Insomnia 24/7
monitoring
Shell server · node exporter
Amsterdam, NL · SSH tunnel
Portfolio site
live
prajwolbikramadhikari.com.np
GitHub Pages · Cloudflare CDN
CI/CD pipeline
passing
GitHub Actions · Gitleaks
CodeQL · Lighthouse CI
Terraform IaC
operational
AWS S3 state · S3-native locking · OIDC
13 records under management
Architecture overview
two-continents-sre-showcase.hcl
pipeline
GitHub Actions Gitleaks CodeQL Lighthouse CI OIDC deploy GitHub Pages
edge
Cloudflare DNS CDN + SSL/TLS Zero Trust tunnel DMARC · SPF · DKIM
IaC
Terraform AWS S3 state S3 locking IAM + OIDC
compute
K3s master (Waco) K3s worker (Phoenix) Tailscale mesh Insomnia NL SSH tunnel Docker services x7
observe
Prometheus Grafana dashboards Blackbox exporter n8n automation Discord alerts
full diagram ->
Technology stack
CI/CD
GitHub Actions Gitleaks CodeQL Lighthouse CI OIDC
Infrastructure as Code
Terraform AWS S3 S3 Locking Cloudflare TF Ansible
Networking
Cloudflare ZT Tailscale AdGuard Home NPM
Containers and Orchestration
Docker Docker Compose K3s Kubernetes ArgoCD ghcr.io Helm
Observability
Prometheus Grafana cAdvisor Alertmanager Blackbox Loki Promtail Uptime Kuma
Automation
n8n Discord webhooks Pushgateway
live running in production
in progress actively building
planned next phase
Build progress
01
⚡
CI/CD and DevSecOps
GitHub Actions · Gitleaks · CodeQL · Lighthouse · OIDC deploy
complete
02
⚙
Infrastructure as Code
Terraform · AWS S3 state · Cloudflare DNS · OCI instances · GitHub Actions OIDC · GitOps pipeline
complete
03
☸
Two-region K3s cluster
Waco control plane + Phoenix ARM worker · Tailscale mesh · multi-arch workloads · deliberately single control plane
complete
04
◎
Global observability
Multi-region Prometheus · Grafana · Loki centralized logging · blackbox external probing · Alertmanager → Discord
complete
05
⟲
GitOps application delivery
ghcr.io multi-arch registry · ArgoCD auto-sync + self-heal · persistent storage (PVC) · Uptime Kuma stateful workload
complete
06
🛡
Reliability engineering and hardening
cert-manager TLS · Velero backups with tested restores · Infisical secrets · Kyverno policies · NetworkPolicies · SLOs and burn-rate alerts
in progress
07
🤖
Agentic AI operations
n8n orchestration · tiered LLM inference (local DeepSeek → frontier API) · Discord human-in-the-loop · whitelisted remediation
planned
5 of 7 phases complete
Certifications and learning path
🎓
WGU M.S. Software Engineering
DevOps focus · in progress
GitLab CI/CD · DR planning
est. completion 2026
☁
AWS SAA-C03
Solutions Architect Associate · studying post-WGU completion
target 2026
⬡
HashiCorp Terraform Associate
hands-on IaC from this project · daily Terraform use in production pipeline
after AWS SAA
☸
CKA — Certified Kubernetes Administrator
practicing on my own two-region cluster · matches the K8s-centric focus
after Terraform Associate
Source code and writing
⌥
homelab-iac
Terraform source
⌥
portfolio
Hugo source
⌥
k3s-status-page
K3s manifests
⌥
homelab-log-triage
Log triage pipeline
⌥
gitops
ArgoCD app manifests
⌥
homelab-watchdog
Out-of-band watchdog
✍
Dev.to
Build writeups
✍
Hashnode
Technical posts
Note: Status indicators above reflect manually updated states. A sanitized public status endpoint (live uptime data via Uptime Kuma, no raw Prometheus exposure) is planned as part of Phase 6.