proxmox-utils (EXPERIMENTAL)
A set of scripts for automating setup and tasks in proxmox.
TODO
- a uniform way to push files to other CTs (mainly the gate -- traefik rules)
- revise defaults
- separate templates/assets into distribution and user directories ...this is needed to allow the user to change the configs without the fear of them being overwritten by git (similar to how config is handlerd)
- create/destory -- DONE
- updates
- backup/restore
- setup host
Architecture
XXX service structure
XXX network
In general proxmox-utils splits the configuration into two levels:
CT level
This level is handled by the Makefile and is almost completely automated
Host level
This level depends on the host setup and is currently done manually depending on existing host configuration.
XXX clean setup scripts...
Prerequisites
Proxmox
sudo apt update && sudo apt upgrade
sudo apt install git make
Network Bridges
proxmox-utils expects there to be at least three bridges:
WAN- connected to the port that faces the external network (either directly of via a router)LAN- a virtual bridge, not connected to any physical interfacesADMIN- connected to a second physical interface used for administrative purposes.
Note their numbers (i.e. the number in vmbr#), this will be needed for
setup.
Note, if the device has more that two ports it is recommended to assign first/last ports to wan/admin respectively and clearly mark them as such.
DNS
Add 10.1.1.1 to the DNS on the Proxmox host node after the 127.0.0.1
but before whatever external DNS you are using.
Firewall
Make sure to allow at least ssh access to the host node from the ADMIN
interface to allow admin CT's access to the host if needed, this is mostly
needed to allow VPN/ssh administration from outside.
For Proxmox firewall configuration see: https://pve.proxmox.com/wiki/Firewall
Recovery strategies
ns/gate as separate nodes for redundancy
ssh facing lan to avoid a single point of failure with gate
Setup
sudo make all
Post-setup
XXX test conections XXX change proxmox ip/network