Skip to content
Hetzner k3s GitOps

Hetzner k3s GitOps Documentation

Production-ready GitOps lab running lightweight Kubernetes (k3s) on Hetzner Cloud CX33 with ArgoCD, SOPS + AGE secrets encryption, and Cloudflare DNS.
Getting StartedView on GitHub

import { Card, CardGrid } from ‘@astrojs/starlight/components’;

Core Architecture Highlights

Section titled “Core Architecture Highlights”
Automated bootstrapping with Ansible playbooks for UFW firewall, system hardening, and k3s node initialization. App-of-Apps pattern for platform infrastructure coupled with git-directory ApplicationSets for automated user application delivery. Strong end-to-end secret encryption using SOPS and AGE. Public Git repository with in-cluster KSOPS decryption via ArgoCD repo-server. Traefik Ingress controller bundled with k3s, automated Let's Encrypt certificates managed by cert-manager, and Cloudflare DNS.