Initial planning docs and hardening scripts for HA rebuild

Covers node 1 hardware/network layout, LVM-thin -> ZFS migration path,
Ceph as the future HA storage upgrade, and baseline SSH/firewall
hardening.

README.md

@@ -0,0 +1,29 @@
+# Proxmox Configuration
+
+Config, planning docs, and scripts for rebuilding my Proxmox VE homelab on new
+hardware, with the end goal of a 3-node HA cluster.
+
+## Goals
+
+- Fresh install on new hardware (old box has a KVM/virtualization bug that
+  forced disabling hardware-accelerated virtualization — not expected to
+  recur on new hardware; verify VT-x/AMD-V + IOMMU in BIOS before assuming
+  otherwise).
+- Move off LVM-thin to ZFS for local storage.
+- Build node 1 so its disk and network layout doesn't need rework when nodes
+  2 and 3 are added later.
+- End state: 3-node cluster, quorum via corosync, HA-managed VMs backed by
+  ZFS replication and/or Ceph.
+
+## Repo layout
+
+- `docs/` — planning docs: hardware layout, storage migration, networking,
+  security hardening. Read `docs/00-overview.md` first.
+- `scripts/` — scripts to apply configuration on a node (SSH hardening,
+  repo switch, etc.). Idempotent, safe to re-run.
+- `config/` — reference config files/snippets to drop onto a node (firewall
+  rules, sshd config, etc.).
+
+## Status
+
+Planning stage — node 1 not yet built.