Community blueprints for real infrastructure
Reusable, reviewed stacks you can run from the OpenSible console in one click — Kubernetes, service meshes, databases, observability and more.
Logstash HA (Docker cluster)
Multi-node Logstash deployment running the official Logstash Docker image. Every node runs one container managed by a dedicated systemd unit, sharing the same pipeline configuration and writing to the same Elasticsearch backend. Ships with a default beats-in / elasticsearch-out pipeline and a per-node HTTP health dashboard exposing Logstash node + pipeline stats and upstream Elasticsearch reachability.
Kibana HA (Docker cluster)
Multi-node Kibana deployment (recommended 2 or 3 behind a load balancer) running the official Kibana Docker image. Every node runs one container managed by a dedicated systemd unit, all pointing at the same Elasticsearch backend via ELASTICSEARCH_HOSTS. Ships with a per-node HTTP health dashboard exposing Kibana + upstream Elasticsearch status.
Portainer CE
Deploy Portainer CE for container management across nodes.
Istio Service Mesh
Install Istio via the official istio-helm charts: base + istiod control plane in the istio-system namespace. Deploys sidecar-injection ready mesh; add gateways separately.
Kuma Service Mesh (kuma.io)
Envoy-based, universal service mesh from kuma.io. Deploys the kuma control plane via the official Helm chart into the kuma-system namespace in standalone mode.
Traefik Reverse Proxy (Docker provider)
Traefik v3 on systemd with the Docker provider enabled — auto-discovers containers on the host's Docker socket via `traefik.enable=true` labels, exposes the protected dashboard, Prometheus metrics and optional Let's Encrypt ACME. Deploy as a single node or as an HA cluster with a keepalived VRRP virtual IP.
RustFS (S3-compatible)
High-performance, distributed S3-compatible object storage written in Rust. Apache-2.0 licensed MinIO alternative — deploy single-node or an erasure-coded cluster across multiple hosts with the RustFS server binary managed via systemd.
Linkerd Service Mesh
Ultralight service mesh (Rust data plane). Deploys the linkerd-control-plane Helm chart into the linkerd namespace. Requires linkerd-crds + trust anchor first — see the values.yaml comment for a one-liner.
Traefik Reverse Proxy / LB
Traefik v3 reverse proxy on systemd (official GitHub tarball). Hardened static config, file-provider directory for dynamic routes, protected dashboard, Prometheus metrics and optional Let's Encrypt ACME. Deploy as a single instance or as an HA cluster with a keepalived VRRP virtual IP.
CI/CD Pipeline (Git → Build → Push → Deploy)
Clone a Git repo (GitHub / GitLab / Gitea / Forgejo), build a container image with docker buildx, push to any OCI registry (Harbor, Sonatype Nexus, Zot, Docker Hub, GHCR, GitLab), and optionally deploy to a target host via docker or docker compose.
Redpanda Cluster (Self-Managed) + Console
Kafka-API-compatible Redpanda Self-Managed cluster on systemd (no ZooKeeper, no JVM, no Docker). Seed servers and advertised listeners are computed from the inventory. Redpanda Console (web UI) is deployed on the first broker.