| name | infra |
| description | Infrastructure lifecycle management. Terragrunt modules, Ansible playbooks, NixOS configs, Proxmox VMs, MikroTik networking, and TrueNAS storage. |
Infrastructure Management
You are managing homelab infrastructure spanning Proxmox VE, MikroTik, TrueNAS, NixOS, and Terragrunt.
Infrastructure Overview
Proxmox Nodes
| Node | Role | LAN IP | Storage IP | AMT IP |
|---|
| grogu | Single node (P700) | 192.168.0.10 | 10.10.10.10 | 10.10.1.10 |
VM Inventory
| VMID | Name | Node | Purpose |
|---|
| 300 | truenas-primary | grogu | TrueNAS SCALE (HBA passthrough) |
| 400-402 | shared-cp* | grogu | Talos K8s shared control plane |
| 410-411 | shared-worker* | grogu | Talos K8s shared workers |
Network (VLANs)
| VLAN | Name | Subnet | Bridge | Purpose |
|---|
| 1 | management | 10.10.1.0/24 | — | AMT, switches |
| 10 | storage | 10.10.10.0/24 | vmbr10 | 10GbE NFS/iSCSI |
| 20 | lan | 192.168.0.0/24 | vmbr20 | VMs, clients, WiFi |
| 30 | k8s-shared | 10.0.1.0/24 | vmbr30 | K8s shared cluster |
| 31 | k8s-apps | 10.0.2.0/24 | vmbr31 | K8s apps cluster |
| 32 | k8s-test | 10.0.3.0/24 | vmbr32 | K8s test cluster |
Commands Reference
When the user invokes /infra, parse $ARGUMENTS to determine the action.
Terragrunt
-
/infra plan [module] — Plan a Terragrunt module or all modules
just tg-plan-module <module>
just tg-plan
Module paths are relative to infrastructure/prod/ (e.g., storage/truenas-primary, compute/k8s-shared, mikrotik/base).
-
/infra apply [module] — Apply a Terragrunt module
ALWAYS ask for explicit confirmation before applying.
just tg-apply-module <module>
-
/infra validate [module] — Validate Terragrunt configuration
just tg-validate
-
/infra list — List all Terragrunt modules
just tg-list
-
/infra graph — Show Terragrunt dependency graph
just tg-graph
-
/infra show <module> — Read and summarize a module's configuration
Read these files:
infrastructure/prod/<module>/terragrunt.hclinfrastructure/prod/<module>/main.tfinfrastructure/prod/<module>/variables.tf (if exists)- The underlying module in
infrastructure/modules/ (if referenced)
Module Inventory
prod/
resource-pools/ # Proxmox resource pool management
images/ # ISO/image downloads (TrueNAS, NixOS, Talos)
compute/
arr-stack/ # NixOS arr media stack VM
k8s-shared/ # Talos shared cluster (use /talos instead)
k8s-apps/ # Talos apps cluster (use /talos instead)
argocd/ # ArgoCD on k8s-shared (Helm)
storage/
truenas-primary/ # TrueNAS primary VM (grogu, HBA passthrough)
mikrotik/
base/ # Bridge, VLANs, ports, WAN, jumbo frames
firewall/ # Firewall rules (depends on base)
dns/ # DNS forwarding to Pi-hole
qos/ # QoS shaping (depends on base)
dhcp/
vlan-20-lan/ # DHCP for LAN
vlan-30-k8s-shared/ # DHCP for K8s shared
vlan-31-k8s-apps/ # DHCP for K8s apps
vlan-32-k8s-test/ # DHCP for K8s test
dns/
cloudns/ # Wildcard DNS records for clusters
tailscale/
acl/ # Tailscale ACL policy
dev/
resource-pools/ # Dev Proxmox pools
images/ # Dev Talos images
Ansible
-
/infra ansible <target> — Run Ansible against a target
just ansible-ping
just ansible-configure-all
just ansible-configure <host>
just proxmox-configure-networking
just proxmox-configure-networking-check
just proxmox-create-api-tokens
just proxmox-rotate-api-tokens
just truenas-ping
just truenas-setup
just restic-setup
-
/infra ansible-check — Run Ansible lint
just ansible-lint
NixOS
-
/infra nixos <target> — NixOS operations
just nixos-vm-up
just nixos-build-pihole
just nixos-flash-pihole /dev/rdiskX
just nixos-deploy-pihole
just nixos-install-arr-stack <ip>
just nixos-update-arr-stack
-
/infra nixos-show <config> — Show a NixOS configuration
Read files from nix/<config>/ (e.g., rpi-pihole, arr-stack).
Proxmox
-
/infra proxmox status — Show Proxmox cluster status
Use the Proxmox MCP tools:
proxmox_get_cluster_status for cluster overviewproxmox_get_nodes for node listproxmox_get_vms for all VMs
-
/infra proxmox node <name> — Show detailed node status
Use proxmox_get_node_status with node name (grogu).
-
/infra proxmox vm <vmid> — Show VM status
Use proxmox_get_vm_status. Determine node from the VM inventory above.
-
/infra proxmox storage — Show storage pools
Use proxmox_get_storage.
MikroTik
-
/infra mikrotik show — Show MikroTik router configuration
Read and summarize modules under infrastructure/prod/mikrotik/.
-
/infra mikrotik plan — Plan MikroTik changes
just tg-plan-module prod/mikrotik/base
just tg-plan-module prod/mikrotik/firewall
just tg-plan-module prod/mikrotik/dns
just tg-plan-module prod/mikrotik/qos
TrueNAS
-
/infra truenas status — Check TrueNAS connectivity and VM status
just truenas-ping
Also use proxmox_get_vm_status for VMID 300 (primary).
-
/infra truenas setup — Run TrueNAS configuration
Ask for confirmation.
just truenas-setup
Globals
-
/infra globals — Show key values from globals.hcl
Read and summarize infrastructure/globals.hcl (IPs, VLANs, versions, cluster config).
-
/infra globals edit — Edit globals.hcl
Open infrastructure/globals.hcl for editing.
Linting & Validation
Argument Parsing Rules
- If no arguments: show help summary of available commands
- Module paths are relative to
infrastructure/prod/ unless prefixed with dev/
- For Ansible targets, match against the
just commands listed above
Safety Rules
- NEVER run
terragrunt apply, terragrunt destroy, or terraform destroy without explicit user confirmation
- NEVER run Ansible playbooks that modify state without confirmation (pings and checks are safe)
- NEVER flash SD cards or run nixos-anywhere without confirmation
- NEVER modify MikroTik configuration without confirmation (can cause network outages)
- For destructive Proxmox operations (delete VM, stop VM), always confirm first
- DNS (Pi-hole) runs independently of Proxmox — never take actions that assume otherwise
Key File Paths
- Globals:
infrastructure/globals.hcl
- Root config:
infrastructure/root.hcl
- Provider config:
infrastructure/prod/provider.hcl
- Modules:
infrastructure/modules/
- NixOS configs:
nix/
- Ansible:
ansible/
- Justfile:
justfile (all commands)
