aboutsummaryrefslogtreecommitdiff
path: root/personal_infra/puppet/modules/proxmox/README.md
blob: 5e5f8bc6cbe632b9074eec370d2938837ba7a17c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
# Proxmox

## Networking

Configures a public Internet IP, and an internal network with forwarding for containers and virtual machines.

Add the following to your Proxmox host Ansible variables:

```
network:
  ip: dotted.ip.notation
  netmask: 255.255.255.0
  gateway: dotted.ip.notation
  proxmox:
    ip: 10.3.3.1
    netmask: 255.255.255.0
    network: 10.3.3.0/24
```

## Proxy

Class `proxmox::proxy` can handle proxying internal web servers.

```
class {'proxmox::proxy':
  mail => lookup('mail.root_mail'),
  base_hostname => lookup('network.public_hostname'),
}
```

This uses the Apache HTTP Server and mod_md to obtain certificates.
Your hostname must be publicly accessible, because http challenges are used.

You receive mails to restart your server when required.

The `base_hostname` certificate is injected daily to pveproxy.