Apps on Proxmox

Ansible roles that deploy the application stack on top of configured Proxmox hosts: HAProxy, Cribl Edge, Cribl Stream.

The third tier. By the time this runs, the host is ready and the apps just need to land on it.

ansible-proxmox-apps deploys the application stack onto VMs and LXC containers that terraform-proxmox provisioned and ansible-proxmox configured. This is where the data-plane services that move traffic between sources and Splunk actually appear on disk.

What it does

• Deploys HAProxy as the front door for syslog and NetFlow traffic
• Deploys Cribl Edge for collection and edge-side reshaping
• Deploys Cribl Stream for routing, transformation, and ingest reduction
• Pulls Cribl pack configuration from the cc-edge-* repos at deploy time
• Wires every service so traffic flows from gear → HAProxy → Cribl Edge → Cribl Stream → Splunk

How it fits

Upstream	Deploys	Downstream
Proxmox config hands off ready hosts	HAProxy (tcp/udp front door), Cribl Edge (collection), Cribl Stream (routing)	Cribl Stream forwards over HEC to Splunk Enterprise

Getting started

1. Confirm the hosts are configured

   Run ansible-proxmox first. Hosts need their ZFS, networking, and monitoring agents in place before apps land on them.

2. Clone and enter the dev shell

   git clone https://github.com/JacobPEvans/ansible-proxmox-apps && cd ansible-proxmox-apps && nix develop

3. Provide Doppler credentials

   Cribl tokens, HAProxy stats password, and Splunk HEC tokens all come from Doppler via DOPPLER_TOKEN.

4. Run the playbook

   ansible-playbook -i inventory site.yml. Re-runs converge drift only — safe to run on a schedule.

Related repos

ansible-proxmox

Host config. Must run first.

Observability

Where the data this stack delivers ends up.

Data pipelines

End-to-end view of the log and NetFlow paths.

Source on GitHub

Roles, packs, full README.