served from a 4-node bare-metal k3s cluster · exposed via Cloudflare Tunnel
Cédric Schippers
Software engineering student building toward DevOps by running real infrastructure, breaking it, and writing down what the failures taught me.
Case studies
Incident writeups from my homelab: what broke, how I found the root cause, and what I would do differently. Written in post-mortem format.
-
A VPN sidecar that cut two nodes off the internet
How a container's kill-switch firewall escaped its pod and locked down the physical node — twice in one evening — and what that taught me about blast radius.
-
The day my control plane stopped accepting writes
Reads worked, writes hung. Tracing k3s write timeouts to workloads I'd let land on the control plane — and recovering from the reboot that followed.
-
A game server that answered every ping with a broken reply
Proving a fault was an upstream server regression, not my network, by capturing packets at the right layer — then working around it with a protocol-level fix in a UDP relay.
Tools I run in production*
*my production: a cluster my household actually depends on.
- k3s
- Helm
- Longhorn
- NFS
- MetalLB
- Cloudflare Tunnel
- WireGuard
- Tailscale
- Grafana
- Docker
- Linux
- Git
- TypeScript
- Bitwarden