Infrastructure as Code Lab

Terraform, Ansible, and shell scripts for reproducible, automated deployment of the 5-machine distributed lab.

---

🎯 Purpose

This repository contains Infrastructure-as-Code (IaC) definitions and deployment automation for the sovereign lab. It enables repeatable, version-controlled deployment of all nodes and services.

Status: 🔄 In Development — foundational framework being built out

---

📦 Contents

Planned Structure

infrastructure-as-code-lab/
├── README.md                          (this file)
├── terraform/
│   ├── main.tf                        Infrastructure definitions
│   ├── variables.tf                   Input variables & configurations
│   └── outputs.tf                     Output values for deployed resources
├── ansible/
│   ├── playbooks/
│   │   ├── base-os-setup.yml         OS hardening, package installation
│   │   ├── docker-deployment.yml     Docker & Docker Compose setup
│   │   ├── monitoring-stack.yml      Prometheus & Grafana deployment
│   │   └── security-hardening.yml    SSH keys, firewall, VLAN config
│   └── inventory/
│       └── hosts.ini                  Node inventory & group assignments
└── scripts/
    ├── bootstrap.sh                   Initial node discovery & SSH setup
    ├── deploy-stack.sh                Full lab deployment orchestrator
    └── validate-deployment.sh         Health checks & service verification

---

🔗 Related Repositories

Repository	Purpose
sovereign-ai-infrastructure	Architecture documentation & node specifications
local-ai-sovereign-stack	Docker Compose definitions for AI stack
proxmox-homelab-setup	Hypervisor setup & LXC containerization

---

📋 Deployment Strategy

Phase 1: Base OS Setup

1. Bootstrap nodes with SSH key-based authentication
2. Install base packages & utilities
3. Configure firewall & VLAN segmentation

Phase 2: Container Runtime

1. Deploy Docker Engine on all nodes
2. Configure Docker networking & volumes
3. Validate container runtime health

Phase 3: Service Deployment

1. Deploy Prometheus + Grafana monitoring
2. Deploy Ollama on GPU node (Arch-GPU)
3. Deploy n8n automation platform
4. Deploy security agents on Kali-Master

Phase 4: Validation & Monitoring

1. Verify all services running
2. Confirm Prometheus metrics collection
3. Test Grafana dashboard access
4. Validate inter-node connectivity

---

🚀 Quick Start (When Ready)

# Bootstrap nodes (assumes SSH access)
./scripts/bootstrap.sh

# Deploy full stack
./scripts/deploy-stack.sh

# Validate deployment
./scripts/validate-deployment.sh

---

📚 Additional Resources

• Node Recovery Procedures — Disaster recovery runbooks
• Docker Hosting Guide — Container deployment details
• Orchestration SOPs — Operational procedures

---

Infrastructure defined as code — reproducible, auditable, recoverable.