Infrastructure

This section covers the infrastructure platform used to provision, secure, and operate Appcircle workloads.

Sections

Section	Description
Proxmox	Network design, SDN, firewall layers, and LXC templates
VM & LXC Security	Baseline security standard for all VMs and containers
Secrets Management	OpenBao installation and configuration
Remote Access	Guacamole setup and OpenBao credential injection

Design Overview

All workloads run on a Proxmox cluster hosted at OVH. Network isolation is enforced through Proxmox SDN with two network segments: edge for externally reachable services and isolated for internal application workloads.

Access to VMs and LXC containers is provided exclusively through Guacamole. Secrets are stored in OpenBao and injected at runtime through OpenBao Agent.