# Rack7 Proxmox Cluster

Three-node Proxmox VE cluster on the rack7 shelf: `pbx-node1`, `pbx-node2`
and `pbx-node3`, all running PVE 8.3.4 (build `8.3.4-1-lab1`).

## Virtual interfaces

| vmbr  | purpose             | config                                             |
|-------|---------------------|----------------------------------------------------|
| vmbr0 | management          | 10.77.42.0/24, gateway 10.77.42.1 on pbx-node1     |
| vmbr1 | lab (VLAN 42)       | tag 42, no DHCP, NAT-only to the uplink            |
| vmbr2 | lab-iot (VLAN 130)  | tag 130, DHCP served by minio01                    |

- Cluster firewall is enabled on every node; VLAN 42 traffic is NAT-only.
- Corosync heartbeat rides vmbr0; keep the management iface out of the
  lab-iot VLAN.
- Node roles: pbx-node1 = hypervisor + gateway, pbx-node2 = AIO
  containers, pbx-node3 = GPU box.