Archived
beatzaplentyandClaude Sonnet 4.6
f85c65870f
Consolidates nixos, docker, raspi, and debian-configuration into a single infrastructure-as-code repo. Includes: - ansible/: full inventory + proxmox-hardening, freeipa, and raspberrypi roles (converted from debian-configuration bash scripts) - terraform/: Proxmox VMs, Dynu DNS, Pi-hole (decommissioned stub), Docker container catalog — migrated from docker/infrastructure/terraform/ - stacks/docker/, stacks/raspi/, nixos/: placeholder READMEs pending git subtree population (see implementation plan) - docs/: internal MkDocs site with architecture, network topology, runbooks, and drift-detection guide; external sanitized site - scripts/: drift-detect.sh, docs-build.sh, install-hooks.sh, check-secrets.sh - CI: secret-scan (push/PR), drift-detect (daily), docs-build (on change) - Pi-hole removed throughout — DNS is FreeIPA, DHCP is router See docs/internal/implementation-plan.md for the phased rollout after pushing to Gitea. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UvNjoxTWEDkhXsd1Dq2ETP
77 lines
1.5 KiB
Terraform
77 lines
1.5 KiB
Terraform
# proxmox_virtual_environment_vm.docker:
|
|
resource "proxmox_virtual_environment_vm" "docker" {
|
|
name = "docker"
|
|
node_name = "pve"
|
|
scsi_hardware = "virtio-scsi-single"
|
|
vm_id = 103
|
|
|
|
agent {
|
|
enabled = true
|
|
timeout = "15m"
|
|
trim = false
|
|
}
|
|
|
|
cpu {
|
|
cores = 4
|
|
numa = false
|
|
sockets = 1
|
|
type = "host"
|
|
units = 1024
|
|
}
|
|
|
|
disk {
|
|
backup = true
|
|
cache = "none"
|
|
datastore_id = "local-lvm"
|
|
discard = "ignore"
|
|
file_format = "raw"
|
|
interface = "scsi0"
|
|
iothread = false
|
|
path_in_datastore = "vm-103-disk-0"
|
|
replicate = true
|
|
size = 120
|
|
ssd = false
|
|
}
|
|
disk {
|
|
backup = true
|
|
cache = "none"
|
|
datastore_id = "local-lvm"
|
|
discard = "ignore"
|
|
file_format = "raw"
|
|
interface = "scsi1"
|
|
iothread = false
|
|
path_in_datastore = "vm-103-disk-1"
|
|
replicate = true
|
|
size = 250
|
|
ssd = false
|
|
}
|
|
|
|
memory {
|
|
dedicated = 8192
|
|
floating = 4096
|
|
keep_hugepages = false
|
|
shared = 0
|
|
}
|
|
|
|
network_device {
|
|
bridge = "vmbr0"
|
|
disconnected = false
|
|
enabled = true
|
|
firewall = true
|
|
}
|
|
|
|
operating_system {
|
|
type = "l26"
|
|
}
|
|
|
|
lifecycle {
|
|
ignore_changes = [
|
|
vga,
|
|
keyboard_layout,
|
|
tablet_device,
|
|
agent,
|
|
]
|
|
}
|
|
|
|
}
|