Skip to main content
The third tier. By the time this runs, the host is ready and the apps just need to land on it.
ansible-proxmox-apps deploys the application stack onto VMs and LXC containers that tofu-proxmox provisioned and ansible-proxmox configured. This is where the data-plane services that move traffic between sources and Splunk actually appear on disk.

​
What it does

  • Deploys HAProxy as the front door for syslog and NetFlow traffic
  • Deploys Cribl Edge for collection and edge-side reshaping
  • Deploys Cribl Stream for routing, transformation, and ingest reduction
  • Pulls Cribl pack configuration from the cc-edge-* repos at deploy time
  • Wires every service so traffic flows from gear → HAProxy → Cribl Edge → Cribl Stream → Splunk

​
How it fits

UpstreamDeploysDownstream
Proxmox config hands off ready hostsHAProxy (tcp/udp front door), Cribl Edge (collection), Cribl Stream (routing)Cribl Stream forwards over HEC to Splunk Enterprise

​
Getting started

1

Confirm the hosts are configured

Run ansible-proxmox first. Hosts need their ZFS, networking, and monitoring agents in place before apps land on them.
2

Clone and enter the dev shell

git clone https://github.com/JacobPEvans/ansible-proxmox-apps && cd ansible-proxmox-apps && nix develop
3

Provide Doppler credentials

Cribl tokens, HAProxy stats password, and Splunk HEC tokens all come from Doppler via DOPPLER_TOKEN.
4

Run the playbook

ansible-playbook -i inventory site.yml. Re-runs converge drift only — safe to run on a schedule.

ansible-proxmox

Host config. Must run first.

Observability

Where the data this stack delivers ends up.

Data pipelines

End-to-end view of the log and NetFlow paths.

Source on GitHub

Roles, packs, full README.