FluxCD-managed Kubernetes cluster running applications defined via the bjw-s app-template Helm chart. Secrets encrypted with SOPS (age). Rook/Ceph for storage. Envoy Gateway (Gateway API) for ingress.
See AGENTS.md for full repo structure and conventions.