Shipping this site: GitOps from a homelab to the public internet

How this portfolio is built and served — Astro to a container image, a self-hosted Gitea registry, ArgoCD, and a Cloudflare Tunnel — with security as acceptance criteria, not polish.

• gitops
• astro
• homelab
• security