Architected and deployed a fully automated, self-healing homelab environment using OpenTofu (Terraform) and NixOS. The project leverages Proxmox VE to orchestrate dual-homed LXC containers (Public/Private networks) with a focus on reproducibility and security. Key features include a custom Terraform-driven bootstrap pipeline that injects configuration bundles into 'cold' nodes, automated Reverse Proxy (Traefik) with DNS-01 ACME certificate resolution for private subdomains, and centralized DNS via Pi-hole. Integrated OneDev for persistent Git operations using LVM-thin bind mounts to decouple application state from the immutable system layer, ensuring data persistence across infrastructure teardowns.
