Establish clean homelab infrastructure baseline

Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.
2026-09-09 16:47:20 +00:00
commit 88a02ababa
418 changed files with 50579 additions and 0 deletions
@@ -0,0 +1,57 @@
+---
+# 3-node Proxmox VE 9.2 cluster "homelab". All were netboot auto-installed on
+# 2026-07-25 (see ../pxe/ and the project memory for the PXE recipe).
+#
+# IPs are all BELOW the router's DHCP pool (192.168.10.10-250) on purpose.
+# .5 = samba AD DC (dc1, libvirt VM on the laptop), .8 = reserved for OpenBao,
+# .127 = laptop ("core" node: NFS + netboot.xyz + k3s + smtp-relay).
+all:
+  children:
+    pve:
+      hosts:
+        pve1:
+          ansible_host: 192.168.10.4
+          # Intel NUC i3-6100, 16G. Most RAM of the three -> LINSTOR controller.
+          # Its UEFI cannot unpack a large initramfs, so it needs the special
+          # PXE path in ../pxe/ if it is ever rebuilt.
+          pve_install_disk: sdb
+          pve_bulk_disk: sda
+
+        pve2:
+          ansible_host: 192.168.10.7
+          # ThinkCentre, Ryzen 2400GE (Raven Ridge), 8G. THIS is the node that
+          # randomly froze. Kernel workaround below; also set BIOS
+          # "Power Supply Idle Control" -> "Typical Current Idle" (the more
+          # reliable half of the fix, and it can only be done physically).
+          pve_kernel_cmdline_extra: "idle=nomwait processor.max_cstate=1"
+          pve_install_disk: nvme0n1
+          pve_bulk_disk: sda
+
+        pve3:
+          ansible_host: 192.168.10.9
+          # Same Raven Ridge silicon as pve2 but has never frozen. Deliberately
+          # left WITHOUT the C-state workaround: processor.max_cstate=1 blocks
+          # deeper idle states and costs power, so it is not applied pre-emptively.
+          # If pve3 ever freezes, set pve_kernel_cmdline_extra here too.
+          pve_install_disk: nvme0n1
+          pve_bulk_disk: sda
+
+    # Network devices driven over network_cli (NOT ssh/python) — they have no
+    # Python interpreter, so normal modules do not apply.
+    network:
+      hosts:
+        vyos-rtr:
+          ansible_host: 192.168.10.2
+          ansible_user: vyos
+          ansible_connection: ansible.netcommon.network_cli
+          ansible_network_os: vyos.vyos.vyos
+          # Key auth; the vyos password is in ../vyos/credentials.yml (gitignored).
+          ansible_ssh_private_key_file: ~/.ssh/id_ed25519
+
+    # Lab VMs on the cluster (normal ssh/python hosts, unlike the `network` group).
+    labvms:
+      hosts:
+        retrolab:
+          ansible_host: 10.60.0.10
+          ansible_user: panxiao81
+          ansible_become: true