GitOps + Renovate
Gives you:
- automation of updates
- smart notification of updates that are below a certain confidence that it won’t break stuff
- rollback: simply
git revert
- the whole shebang
Some stacks that work well with GitOps are:
- k8s + Flux or ArgoCD
- Nix(OS)
Mixing them is a LOT of complexity though. Just pick whichever you are most comfortable with. If you want a declarative immutable OS just for running k8s, check Talos Linux.
If you don’t want to deal with GitOps, Nix or k8s, and you don’t need recent versions, just run Debian and set a cronjob for auto updates. Then only deal with potential breaking changes just once every 5(?) years or thereabouts.
Honestly, k8s + GitOps at home is my project that I’m just starting this week. I found a community around it (on Discord 🤮) called Home Operations.
Docker Hub sucks and is VERY strict with rate limits. Try ghcr.io or the aws container registry.