personal_infra/tofu/nodito/vms.auto.tfvars

# Non-secret nodito infrastructure config. Auto-loaded by tofu (*.auto.tfvars),
# so no -var-file is needed. Provider credentials live in terraform.tfvars,
# which is gitignored.

proxmox_node     = "nodito"
zfs_storage_name = "proxmox-tank-1"
template_name    = "debian-13-cloud-init"
cloud_init_user  = "counterweight"

# Public key injected into every VM via cloud-init.
ssh_authorized_keys = <<EOKEY
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOVC68uU7dTpZ8mDleakoBX6crnBdKNuvg6qeD73t+6L counterweightoperator@counterstation
EOKEY

# Note that the resources set here are designed for startup.
# Some of these services are resource hungry at first, but
# can be powered down after their bootstrap finishes.
vms = {
  "small-backups-box" = {
    vmid         = 1200
    name         = "small-backups-box"
    cores        = 1
    memory_mb    = 512
    disk_size_gb = 100
    ipconfig0    = "ip=dhcp"
  },
  "knots-box" = {
    vmid         = 2100
    name         = "knots-box"
    cores        = 4
    memory_mb    = 16384
    disk_size_gb = 10
    ipconfig0    = "ip=dhcp"
  },
  "fulcrum-box" = {
    vmid         = 2200
    name         = "fulcrum-box"
    cores        = 1
    memory_mb    = 2048
    disk_size_gb = 10
    ipconfig0    = "ip=dhcp"
  },
  "mempool-box" = {
    vmid         = 2300
    name         = "mempool-box"
    cores        = 2
    memory_mb    = 4096
    disk_size_gb = 30
    ipconfig0    = "ip=dhcp"
  },
  # disk_size_gb is the ROOT disk only. monerod-box also carries a second
  # 500 GB disk (scsi1) for the blockchain, attached in the Proxmox UI and
  # therefore invisible here - the vm resource sets ignore_changes = all, so
  # tofu neither created it nor would notice if it vanished. It is mounted at
  # /var/lib/monero by ansible/roles/monero (tasks/storage.yml), by UUID, and
  # monerod's unit refuses to start without it.
  "monerod-box" = {
    vmid         = 2400
    name         = "monerod-box"
    cores        = 4
    # Raised from 2048 on 2026-09-20: monerod was OOM-killed hourly once the
    # chain passed ~39% (1.74 GB anon-rss against 1973 MB of RAM), and the
    # explorer shares this box. Applied in Proxmox; recorded here because the
    # vm resource sets ignore_changes = all and will not reconcile it.
    memory_mb    = 6144
    disk_size_gb = 10
    ipconfig0    = "ip=dhcp"
  },
  "memos-box" = {
    vmid         = 8100
    name         = "memos-box"
    cores        = 1
    memory_mb    = 1024
    disk_size_gb = 10
    ipconfig0    = "ip=dhcp"
  },
  "forgejo-runner-box" = {
    vmid         = 3100
    name         = "forgejo-runner-box"
    cores        = 4
    memory_mb    = 4096
    disk_size_gb = 50
    ipconfig0    = "ip=dhcp"
  },
  "arbret-staging-box" = {
    vmid         = 3200
    name         = "arbret-staging-box"
    cores        = 2
    memory_mb    = 2048
    disk_size_gb = 20
    ipconfig0    = "ip=dhcp"
  },
  "jar-lid-archive-staging-box" = {
    vmid         = 3300
    name         = "jar-lid-archive-staging-box"
    cores        = 1
    memory_mb    = 1024
    disk_size_gb = 10
    ipconfig0    = "ip=dhcp"
  },
  # disk_size_gb here is the music library's ceiling, not just the OS: the
  # library lives on the root disk at /srv/music. ~45 GB is usable after
  # Debian, so roughly 300-450 albums in FLAC. Growing it means a Proxmox
  # resize + growpart/resize2fs (03_vm_disk_enlargement.md), because
  # ignore_changes = all means tofu will not do it.
  "music-box" = {
    vmid         = 8200
    name         = "music-box"
    cores        = 1
    memory_mb    = 1024
    disk_size_gb = 50
    ipconfig0    = "ip=dhcp"
  }
}