Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.jacobpevans.com/llms.txt

Use this file to discover all available pages before exploring further.

The third tier. By the time this runs, the host is ready and the apps just need to land on it.
ansible-proxmox-apps deploys the application stack onto VMs and LXC containers that terraform-proxmox provisioned and ansible-proxmox configured. This is where the data-plane services that move traffic between sources and Splunk actually appear on disk.

​
What it does

  • Deploys HAProxy as the front door for syslog and NetFlow traffic
  • Deploys Cribl Edge for collection and edge-side reshaping
  • Deploys Cribl Stream for routing, transformation, and ingest reduction
  • Pulls Cribl pack configuration from the cc-edge-* repos at deploy time
  • Wires every service so traffic flows from gear → HAProxy → Cribl Edge → Cribl Stream → Splunk

​
How it fits

UpstreamDeploysDownstream
Proxmox config hands off ready hostsHAProxy (tcp/udp front door), Cribl Edge (collection), Cribl Stream (routing)Cribl Stream forwards over HEC to Splunk Enterprise

​
Getting started

1

Confirm the hosts are configured

Run ansible-proxmox first. Hosts need their ZFS, networking, and monitoring agents in place before apps land on them.
2

Clone and enter the dev shell

git clone https://github.com/JacobPEvans/ansible-proxmox-apps && cd ansible-proxmox-apps && nix develop
3

Provide Doppler credentials

Cribl tokens, HAProxy stats password, and Splunk HEC tokens all come from Doppler via DOPPLER_TOKEN.
4

Run the playbook

ansible-playbook -i inventory site.yml. Re-runs converge drift only — safe to run on a schedule.

ansible-proxmox

Host config. Must run first.

Observability

Where the data this stack delivers ends up.

Data pipelines

End-to-end view of the log and NetFlow paths.

Source on GitHub

Roles, packs, full README.