SkillsAdd

ionfury/homelab

app-template

Deploy applications using bjw-s/app-template Helm chart - a flexible chart for helmifying container images without dedicated charts. Use when: (1) Deploying container images that lack official Helm charts, (2) Creating HelmRelease manifests for Flux GitOps, (3) Configuring multi-container pods with sidecars, (4) Setting up persistent storage, ingress, services for custom applications, (5) Questions about app-template values structure or patterns, (6) Deploying any custom container to Kubernetes…

First seen Feb 25, 2026

Installation

$ npx skills add ionfury/homelab --skill app-template
View on skills.sh ↗ GitHub repository ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

template-skill Similar name
anthropics/skills

Replace with description of the skill and when Claude should use it.

64K installs
recipe-create-doc-from-template Similar name
googleworkspace/cli

Copy a Google Docs template, fill in content, and share with collaborators.

27.7K installs
gws-modelarmor-create-template Similar name
googleworkspace/cli

Google Model Armor: Create a new Model Armor template.

26.8K installs
make-skill-template Similar name
github/awesome-copilot

Scaffold new Agent Skills with proper frontmatter, directory structure, and bundled resource or…

9K installs
ppt-template-creator Similar name
anthropics/financial-services

Creates self-contained PPT template SKILLS (not presentations) from user-provided PowerPoint te…

2K installs
planetscale-customer-report-template Similar name
planetscale/skills

Produce the final PlanetScale best-practices report after running the inventory and relevant re…

13 installs

Also in this package

Other skills from ionfury/homelab · top by installs.

npx skills add ionfury/homelab
prometheus 73 opentofu-modules 71 taskfiles 70 terragrunt 65 k8s 49 cnpg-database 49 architecture-review 45 self-improvement 40 kubesearch 39 versions-renovate 38

Browse all from ionfury/homelab

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Also listed on

Alternate registries and mirrors of this skill.

Repository health

Stars 25
License LICENSE
Default branch main
Open issues 6
Status Active

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 3,697 B
  • docs SUMMARY.md 883 B

History

  1. First seen on skills.sh
  2. First recorded snapshot · 31 installs

SKILL.md

app-template Helm Chart

The bjw-s/app-template chart deploys containerized applications without requiring a dedicated Helm chart. It provides a declarative interface for common Kubernetes resources.

Chart source: oci://ghcr.io/bjw-s-labs/helm/app-template Schema: https://raw.githubusercontent.com/bjw-s-labs/helm-charts/app-template-4.6.0/charts/other/app-template/values.schema.json

Quick Start

Minimal values.yaml for a single-container deployment:

# yaml-language-server: $schema=https://raw.githubusercontent.com/bjw-s-labs/helm-charts/app-template-4.6.0/charts/other/app-template/values.schema.json
controllers:
  main:
    containers:
      main:
        image:
          repository: nginx
          tag: latest

service:
  main:
    controller: main
    ports:
      http:
        port: 80

Security Context

Namespace Security Level Required
restricted defaultPodOptions.securityContext with runAsNonRoot: true + seccompProfile: RuntimeDefault; every container needs allowPrivilegeEscalation: false, capabilities.drop: ["ALL"], readOnlyRootFilesystem: true
baseline defaultPodOptions.securityContext with runAsUser/fsGroup recommended
privileged None required

task k8s:validate does NOT catch PodSecurity violations — only admission time reveals them. If an image runs as root, set runAsUser: 65534. If the app writes to the filesystem, use writable emptyDir mounts rather than disabling readOnlyRootFilesystem.

Resource Limits

Resource limits prevent runaway processes, not bin-packing. The homelab hardware is heavily over-provisioned — be generous with limits rather than running tight to avoid OOMKills and CrashLoopBackOff. Never set CPU limits unless the workload is genuinely CPU-abusive.

Workload Type Memory Request Memory Limit
Lightweight sidecar (gluetun, oauth2-proxy) 64Mi 256Mi
Web application 128-256Mi 512Mi-1Gi
Media application (qbittorrent, jellyfin) 512Mi 2-4Gi
Database (CNPG) 256Mi 1-2Gi

Flux HelmRelease Integration

For this homelab, app-template deploys via Flux ResourceSet. Add to kubernetes/platform/helm-charts.yaml:

- name: "my-app"
  namespace: "default"
  chart:
    name: "app-template"
    version: "4.6.0"
    url: "oci://ghcr.io/bjw-s-labs/helm"  # Note: OCI registry
  dependsOn: [cilium]

Values go in kubernetes/platform/charts/my-app.yaml.

References

  • references/values-reference.md — complete field reference with all YAML examples
  • references/patterns.md — real-world deployment examples (Vaultwarden, Home Assistant, etc.)