Homelab (Proxmox Server)
One Proxmox node that holds nothing of its own. Every VM, container, secret, and model on it comes from a repo: Terraform with remote state in Cloudflare R2, Ansible for the rest, and CI that posts a plan before anything is applied. It runs a Tailscale subnet router, an Ollama container that owns the GPU and serves local models, a merge-to-deploy runner, hardened Docker services, a nightly LLM agent in a disposable rootless-Podman sandbox, and Prometheus + Grafana over all of it. No public ingress.
private repo










