🚀 SlyCharts - Helm charts, the sly way

A collection of production-ready Helm charts for self-hosted applications, featuring signed charts for enhanced security.

🔐 Security Features

All charts in this repository are signed with Cosign using keyless signing for maximum security and trust:

• ✅ Cryptographically Signed - Every chart release is signed
• ✅ Keyless Verification - No private key management required
• ✅ FluxCD Compatible - Native signature verification support
• ✅ Multiple Distribution - Available via traditional Helm repos and OCI registry

📖 Complete Signing & Verification Guide →

📦 Available Charts

Chart	Description	Version	Artifact Hub
wg-easy	WireGuard VPN with web interface
wireguard	WireGuard VPN server
wordpress	WordPress with MariaDB and Memcached

🚀 Quick Start

Installation

📋 Note: Each chart requires certain mandatory values to be installed properly. Check the chart's README for required configuration and sample values.

# Example: Install wg-easy with required values
kubectl apply -f ./samples/namespace.yaml

helm install wgeasy oci://ghcr.io/slybase/charts/wg-easy \
  --values ./samples/simple.values.yaml \
  -n wg-easy

📖 Each chart includes a detailed README with:

• Required and optional configuration values
• Sample values files for different use cases
• Step-by-step installation instructions

Check the samples/ folder in each chart directory for ready-to-use example configurations.

FluxCD with Signature Verification

apiVersion: source.toolkit.fluxcd.io/v1beta2
kind: HelmRepository
metadata:
  name: slybase-oci-charts
  namespace: flux-system
spec:
  type: oci
  interval: 10m
  url: oci://ghcr.io/slybase/charts
---
apiVersion: helm.toolkit.fluxcd.io/v2beta1
kind: HelmRelease
metadata:
  name: wg-easy
  namespace: default
spec:
  interval: 10m
  chart:
    spec:
      chart: wg-easy
      sourceRef:
        kind: HelmRepository
        name: slybase-oci-charts
        namespace: flux-system
      verify:
        provider: cosign # Enable signature verification

🔍 Chart Verification

Verify chart authenticity before installation:

# For OCI charts
cosign verify ghcr.io/slybase/charts/wg-easy:latest \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  --certificate-identity "https://github.com/slydlake/helm-charts/.github/workflows/oci-release.yaml@refs/heads/main"

# For traditional charts (download signature bundle first)
cosign verify-blob chart.tgz \
  --bundle chart.tgz.cosign.bundle \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  --certificate-identity "https://github.com/slydlake/helm-charts/.github/workflows/release.yaml@refs/heads/main"

🌟 ArtifactHub

Find these charts on ArtifactHub with verified signatures for enhanced trust and discovery.

🤝 Contributing

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Test your changes
5. Submit a pull request

🔗 Links

• Documentation: Chart Signing Guide
• Issues: GitHub Issues
• OCI Registry: ghcr.io/slybase/charts