General
Core components
Networking
The cluster uses traefik for networking.
Secrets
I manage my secrets with SOPS as described in the flux documentation about SOPS.
The public key and config file can be found in the cluster directory.
A backup of the private key is in 1password.
TLS
cert-manager is configured to provide certificates for the services via LetsEncrypt.
Automation 
The cluster is monitored by renovate bot. The bot is configured with the config file and manages a dashboard issue with an overview of all open issues. A list of renovate jobs can be found in the renovatebot dashboard.