@pezhore

I had deployed #FreeIPA before briefly but recently I chose #GLauth which is lighter than both FreeIPA and #OpenLDAP. I'll probably revisit it at some point and I'll be sure to check out the #ansible roles for it, but for now #GLauth is sitting in fine.

I like that GLauth can be configured by a singular text file which I can easily version in Git. I'll have to see if there are ansible roles for adding GLauth user entires. I will also be using #Keycloak for my first test.

As for running a three-node-cluster yeah I think you'll be happy with it. I'm using #Terraform with the #Proxmox provider. You need to set up an API key and then the template OS. The easiest way is to use a Cloud image that has cloud-init capabilities so you can seed users/keys. That way your later #Ansible playbooks can hook in easily. You can probably also find a strictly Ansible way to deploy to Proxmox on Ansible Galaxy, but I like using Terraform where it fits best -- provisioning.

Good point about secret management, I'll be using a combination of tools but HC #Vault will be among them.

What are your learning goals with your lab and what do you tend to do with yours?