Skip to main content

Soverstack Documentation

Welcome to the Soverstack documentation. This guide covers everything you need to deploy and manage a production-grade infrastructure platform.

What is Soverstack?

Soverstack is an Infrastructure-as-Code platform that provisions and manages:

  • Proxmox VE clusters with HA and Ceph storage
  • Zero-trust networking with VyOS firewall and Headscale VPN
  • Kubernetes clusters with Cilium CNI and Traefik ingress
  • Database clusters with PostgreSQL Patroni HA
  • Observability stack with Prometheus, Grafana, Loki
  • Security infrastructure with Keycloak SSO and OpenBao secrets

Architecture Overview

Documentation Structure

01 - Getting Started

Installation, prerequisites, and your first deployment.

02 - Architecture

Platform architecture, infrastructure tiers, VM ID conventions, and security model.

03 - Layers

Configuration reference for each infrastructure layer:

  • Datacenter (physical servers)
  • Networking (firewall, VPN, DNS)
  • Compute (VMs and instances)
  • Databases (PostgreSQL clusters)
  • Cluster (Kubernetes)
  • Security (IAM, secrets)
  • Observability (monitoring, logging)
  • Apps (applications)

04 - Services

Detailed configuration guides for each service:

  • VyOS Firewall
  • Headscale VPN
  • PowerDNS
  • Keycloak IAM
  • OpenBao Secrets
  • PostgreSQL with Patroni
  • Redis Sentinel
  • Prometheus & Grafana
  • Loki & Wazuh

05 - Kubernetes

Kubernetes cluster setup, networking, ingress, storage, and GitOps.

06 - Operations

Deployment workflows, validation, scaling, and troubleshooting.

07 - Runbooks

Emergency procedures, failover guides, and incident response.

08 - Reference

Complete schema reference for all types and configurations.

10 - Deep Dive

Deep technical documentation: datacenter bootstrap, software mesh architecture, VM details.

99 - Appendix

Glossary, FAQ, changelog, and migration guides.

TopicLink
InstallationGetting Started
Platform Schemaplatform.yaml Reference
VM ID RangesVM ID Conventions
Infrastructure Tierslocal vs production vs enterprise
CLI CommandsCommand Reference

Infrastructure Tiers

TierUse CaseHAMin Servers
localDevelopmentNo1
productionProduction workloadsYes3
enterpriseEnterprise with complianceYes3+

Support