Ansible
Playbooks and roles that bootstrap the non-Talos hosts in the homelab — the Proxmox hosts, the NetBird connector LXCs, and the operator workstation; any Linux box that doesn't ship with an immutable OS.
Playbooks and roles that bootstrap the non-Talos hosts in the homelab — the Proxmox hosts, the NetBird connector LXCs, and the operator workstation; any Linux box that doesn't ship with an immutable OS.
Ansible role that installs the upstream Docker engine on a Fedora host — the docker-ce repository and package, the service, and docker-group membership for the Ansible user.
The IaC + cluster-bootstrap layer that turns hardware and the network fabric into a running Kubernetes cluster — Proxmox, Hetzner, Talos, Flux, OpenTofu, Ansible.
Who owns what between OpenTofu (everything outside Kubernetes), Ansible (mutable hosts), Talos machine config (the nodes themselves), and Crossplane (external resources whose lifecycle belongs to an app namespace) — and where the handoff boundaries between the four layers sit.