Proxmox‑GitOps: Self-Hosted GitOps (demo incl., recursive Monorepo IaC)

Hacker News

Proxmox‑GitOps implements a self‑contained CI/CD control plane for Proxmox VE that bootstraps from a single repository and manages itself recursively within the LXC containers under management Repository: https://github.com/stevius10/Proxmox-GitOps Demo (1min+): https://youtu.be/2oXDgbvFCWY?si=gSSACmVi0mO6v8xx Architecture - A local bootstrap (`./local/run.sh`) seeds a Gitea instance and runner, initializes the pipeline, and creates an initial PR. Merging this PR transitions the system into self-management; subsequent commits converge the desired state across Proxmox LXC containers. - The system uses a self-contained monorepo with reusable container libraries. Ansible handles provisioning against Proxmox, while Cinc (Chef) performs desired-state convergence and cross-layer orchestration where declarative modeling is insufficient. Concept - Recursive self-management: the control plane executes within the managed containers to maximize reproducibility and minimize drift. - Git as current desired state: operations map to standard Git workflows (commit, merge, rollback) in a stateless management model. - Convention-based extensibility: add a service by copying a container definition from libs, adding a minimal cookbook and `config.env`; the pipeline handles provisioning, configuration, and validation. - Loose coupling: containers remain independently replaceable and continue to function without manual follow-up. Environment - Proxmox VE 8.4–9.0, Debian 13 LXC per default. - Local bootstrap via Docker; further actions are repository-driven. Install - Configure Proxmox credentials in `./local/config.json`. - Run `./local/run.sh` to seed the environment. - Accept the initial PR in the seeded Gitea instance at `localhost:8080/main/config`. - Push changes to trigger provisioning, convergence, and validation on Proxmox VE. Trade-Offs - The recursive bootstrap increases complexity to preserve rebuild‑from‑repo semantics and deterministic behavior. - On Proxmox 9, stricter token privileges limit certain operations; automation uses root‑context API access where tokens are insufficient.

Visit product View on Hacker NewsSep 27, 2025

Share card

Actual performance

2points

Did not reach leaderboard

Launch Intel predictions

Analyze your own launch →

Product HuntOn track for Day 1 leaderboard · Strong signals: model, dock, context · Missing: mac, agents, macos

86%86% predicted probability of success on Product Hunt, based on ML models trained on real launch data.

best fitHighest predicted score across all platforms for this description.

Indie HackersFits the IH revenue-focused audience · Strong signals: maximize · Missing: supports, reddit linkedin, podcasting

81%81% predicted probability of success on Indie Hackers, based on ML models trained on real launch data.

Hacker NewsStrong engagement from HN community · Strong signals: pipe, io · Missing: https docs, excited, just released

53%53% predicted probability of success on Hacker News, based on ML models trained on real launch data.

nativeThis product was originally launched on this platform.

TrustMRRLess likely to generate early MRR · Missing: mobile apps, ios, personal

47%47% predicted probability of success on TrustMRR, based on ML models trained on real launch data.

AppSumoMay struggle as an AppSumo deal · Strong signals: host · Missing: plus, platform, intuitive

24%24% predicted probability of success on AppSumo, based on ML models trained on real launch data.

Acquire.comPre-revenue stage for this audience · Missing: arr, mrr, revenue

15%15% predicted probability of success on Acquire.com, based on ML models trained on real launch data.

BetaListMay not resonate with beta-testers · Missing: web3, chat, crypto

2%2% predicted probability of success on BetaList, based on ML models trained on real launch data.

Incorrect prediction on native model

Similar products

Instanote – self-hosted pinboard68%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Instanote – self-hosted pinboard

Hacker News8

Mob – Self Hosted Polling67%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Mob – Self Hosted Polling

Hacker News2

Mob – Self Hosted Polling67%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Mob – Self Hosted Polling

Hacker News12

Self-Hosted Literate K3s Cluster60%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Self-Hosted Literate K3s Cluster

Hacker News1

A Self-Hosted Podcatcher68%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

A Self-Hosted Podcatcher

Hacker News2

Self hosted x86-64 assembler75%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Self hosted x86-64 assembler

Hacker News4

Self Hosted WebSocket Filesharing74%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Self Hosted WebSocket Filesharing

Hacker News4

Rove – Self-hosted container deployments63%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Rove – Self-hosted container deployments

Hacker News6

Self-Hosted Killswitch68%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Self-Hosted Killswitch

Hacker News3

Self-hosted Thunderclap68%Launch Intel prediction score: how likely this product is to succeed on its source platform, based on its name, tagline, and description.

Self-hosted Thunderclap

Hacker News2

Browse all products Analyze your launch