Matériel & VMs
Serveur principal
|
|
| Modèle |
HP DL380 Gen9 |
| CPU |
2x Xeon E5-2640 v4 — 20 cœurs / 40 threads |
| RAM |
64 Go DDR4 ECC (upgrade 128 Go planifié pour NEBULA Phase D) |
| Stockage système |
SSD Samsung 1 To |
| Stockage données |
ZFS RAIDZ1 — 3 disques, 476 Go utiles |
| Contrôleur |
P440ar en mode HBA (passthrough disques) |
| GPU |
Nvidia Quadro P2000 (passthrough planifié) |
| Réseau |
Intel X540-T1 10GbE (WAN) + VIMIN AQC113 10GbE (WiFi bridge) |
| Management |
iLO 4 |
| Hyperviseur |
Proxmox VE 8 |
VMs en production
| VM |
VLAN |
Rôle |
vCPU |
RAM |
| fw-gw |
WAN |
Firewall nftables, Suricata IDS, dnsmasq |
4 |
4 Go |
| infra-dns |
20 |
Pi-hole, FreeRADIUS, Omada Controller |
4 |
4 Go |
| gateway |
30 |
Traefik, Authentik, CrowdSec, Cloudflared, Tailscale |
4 |
6 Go |
| monitor |
80 |
Prometheus, Grafana, Uptime Kuma |
2 |
4 Go |
| soc-core |
60 |
Wazuh SIEM, Velociraptor EDR |
6 |
14 Go |
| soc-intel |
60 |
IRIS, MISP, Shuffle SOAR |
4 |
10 Go |
| cloud-perso |
40 |
Nextcloud, Vaultwarden, Grocy |
4 |
8 Go |
| apps-tools |
40 |
Gitea, WikiJS, Matrix/Synapse, Element, Firefly III |
2 |
6 Go |
| apps-remote |
40 |
MeshCentral |
2 |
2 Go |
| media-ia |
50 |
Ollama, Open-WebUI, Immich, RustDesk |
6 |
16 Go |
| iot-ha |
70 |
Home Assistant (HAOS) |
4 |
4 Go |
| pbs |
10 |
Proxmox Backup Server |
2 |
2 Go |
| bastion |
10 |
Guacamole (SSH bastion) |
2 |
2 Go |
Agents de sécurité par VM
Chaque VM embarque 4 agents de sécurité (sauf iot-ha — contrainte HAOS) :
- Wazuh — SIEM agent (logs, FIM, compliance)
- Tetragon — eBPF kernel monitoring (exécution de processus)
- Velociraptor — EDR/DFIR (live response, forensics)
- node-exporter — métriques Prometheus