Shipping this site: GitOps from a homelab to the public internet

How this portfolio is built and served - Astro to a container image, a self-hosted Gitea registry, Argo CD, and a Cloudflare Tunnel - with security as acceptance criteria, not polish.

• gitops
• astro
• homelab
• security