Proxmox Terraform Infrastructure

pennyberry/Public/terraform/proxmox | Nodes: kiwi, pve2, pve3 | Datastores: nvme, iso-storage

Network Layer

🌐

vmbr0

Primary network bridge — all VMs and containers attach here

Bridge

🌐

vmbr1

Secondary bridge — firewall uplink / external

Bridge

🔥

OPNsense2 Firewall

6 CPU · 8 GB RAM · 32 GB NVMe
Dual NIC: vmbr0 + vmbr1
Node: kiwi · VM ID: 109

Firewall

▼ ▼ ▼

K3S Kubernetes Cluster

☸️

k3s-server

2 CPU · 4 GB RAM · 25 GB disk
Ubuntu Noble · cloud-init
MetalLB LB · NFS persistent storage
NGINX Proxy Manager

Server

☸️

k3s-agent-0

2 CPU · 4 GB RAM · 25 GB disk
Joins server via shared token
Ubuntu Noble · cloud-init

Agent

☸️

k3s-agent-1

2 CPU · 4 GB RAM · 25 GB disk
Joins server via shared token
Ubuntu Noble · cloud-init

Agent

▼ ▼ ▼

Workload VMs

🤖

Hermes

AI agent host
Ubuntu Noble · cloud-init

🎵

Jellyfin

Media streaming server
Ubuntu Noble · cloud-init

🎮

Hytale

Game server — DEPRECATED
Ubuntu Noble · cloud-init

Deprecated

🔗

CORS-Proxy

2 CPU · 2 GB RAM · 32 GB NVMe
Node: kiwi · VM ID: 106 — DEPRECATED

Deprecated

🐧

Ubuntu-Server-1

General-purpose Ubuntu VM — DEPRECATED
Ubuntu Noble · cloud-init

Deprecated

▼ ▼ ▼

Shared Terraform Modules

📐

vm_ubuntu

Reusable Ubuntu Noble VM module
Cloud-init provisioning · SSH key auth
qemu-guest-agent · DHCP · user-data
CPU type: x86-64-v2-AES · Nodes: kiwi, pve2, pve3

Module

💾

images

Cloud image management
Ubuntu Noble qcow2 download per node

Module

Infrastructure Summary

Proxmox cluster with 3 nodes: kiwi, pve2, pve3
Datastores: nvme (VM disks), iso-storage (cloud images)
OPNsense2 firewall (VM 109) with dual NIC for network segmentation
K3S cluster: 1 server + 2 agent nodes, MetalLB LB, NFS persistent storage, NGINX Proxy Manager
Active workload VMs: Hermes (AI agent), Jellyfin (media streaming)
Deprecated: Hytale (game server), CORS-Proxy (VM 106), Ubuntu-Server-1
Shared vm_ubuntu module: Ubuntu Noble cloud-init, SSH key auth, qemu-guest-agent, x86-64-v2-AES CPU
All VMs provisioned via bpg/proxmox provider with environment-variable credentials