feat(terraform): add Proxmox VM and Unifi DHCP modules (Phase 2)

terraform/proxmox/vm/main.tf

@@ -0,0 +1,88 @@
+# ─── VM ID Derivation ────────────────────────────────────────────────────────
+# Convention carried from existing Ansible playbooks:
+# VM ID = {third_octet}{fourth_octet:03d}
+# Example: 10.1.71.35 → 71035
+
+locals {
+  ip_octets = split(".", var.ip_address)
+  vm_id     = tonumber("${local.ip_octets[2]}${format("%03d", tonumber(local.ip_octets[3]))}")
+}
+
+# ─── Template Lookup ─────────────────────────────────────────────────────────
+# Find the template VM ID by name on the clone node
+
+data "proxmox_virtual_environment_vms" "templates" {
+  node_name = var.clone_node
+
+  filter {
+    name   = "template"
+    values = ["true"]
+  }
+
+  filter {
+    name   = "name"
+    values = [var.template_name]
+  }
+}
+
+# ─── VM Resource ─────────────────────────────────────────────────────────────
+
+resource "proxmox_virtual_environment_vm" "vm" {
+  name    = var.hostname
+  vm_id   = local.vm_id
+  node_name = var.target_node
+
+  description = "Provisioned by mk-labs pipeline on ${timestamp()}"
+  tags        = ["managed", "pipeline"]
+
+  # Clone from template on fantasyland
+  clone {
+    vm_id   = data.proxmox_virtual_environment_vms.templates.vms[0].vm_id
+    node_name = var.clone_node
+    full      = true
+    datastore_id = var.datastore
+  }
+
+  # Cloud-init configuration
+  # Uses DHCP — Unifi DHCP reservation is created before VM starts
+  initialization {
+    ip_config {
+      ipv4 {
+        address = "dhcp"
+      }
+    }
+
+    dns {
+      servers = var.dns_servers
+      domain  = var.search_domain
+    }
+
+    datastore_id = var.datastore
+  }
+
+  # Network interface
+  network_device {
+    bridge  = var.bridge
+    model   = "virtio"
+    vlan_id = var.vlan_id
+  }
+
+  # VM stays STOPPED after clone.
+  # n8n handles: DHCP reservation → HA affinity rule → VM start
+  # This ensures DHCP is in place before first boot.
+  started = false
+
+  # QEMU guest agent is installed in template (via Packer).
+  # Note: Proxmox 9 requires VM.GuestAgent.Audit privilege on the API token.
+  agent {
+    enabled = true
+  }
+
+  # Prevent Terraform from fighting with manual changes
+  lifecycle {
+    ignore_changes = [
+      description,
+      tags,
+    ]
+  }
+}