Building a Production Multi-Cluster Kubernetes Lab with Talos Linux

Table of Contents Overview The Challenge Architecture Design Final Architecture Network Layout The Implementation Journey Phase 1: Initial Assessment Phase 2: DB Cluster Setup Phase 3: App Cluster Creation Phase 4: Repository Reorganization Phase 5: Security Audit Phase 6: Documentation and Commit Technology Stack Key Decisions Why Separate Clusters? Why Single Control Plane for App Cluster? Why Talos Linux? Final Directory Structure Common Operations Lessons Learned What Worked What Didn’t Work Best Practices Troubleshooting Reference Next Steps References Overview This guide documents building a production-ready four-node Talos Linux Kubernetes lab with multi-cluster architecture. The implementation features immutable infrastructure, GitOps workflows, and proper separation of stateful and stateless workloads across two distinct clusters. ...

November 11, 2025 · Ciarán Donegan

Securing LAN Networks with pfSense and Mullvad VPN

Overview I recently set up a dedicated mini PC firewall running pfSense with Mullvad VPN to route all my home network traffic through an encrypted tunnel. This setup provides network-wide privacy protection, eliminates the need for individual device VPN clients, and gives me granular control over my network security. Bottom line: 937 Mbps download speeds through the VPN with 21ms latency to (XX) servers, all traffic automatically protected, and enterprise-grade firewall features. ...

September 19, 2025 · Ciarán Donegan