sonarqube¶
| Field | Value |
|---|---|
| ID | sonarqube |
| Class | host |
| Role | code-quality |
| Status | active |
| Primary IP | 192.168.6.101 |
| Proxmox | LXC 101 on prox |
| Inventory | inventory/hosts/sonarqube.yaml |
Overview¶
SonarQube Community LTS for static analysis. Replaces an unmanaged community-scripts LXC (same VMID) destroyed 2026-07-25. Workload is Docker compose in this repo; TLS/Authentik and Traefik live on infra-services.
Hardware (inventory)¶
| Resource | Value |
|---|---|
| vCPU | 2 |
| RAM | 6 GB |
| Disk | 30 GB rootfs |
Convergence load controls¶
SonarQube is CPU-constrained, so both ansible-pull services run at low CPU
and I/O weight with a hard limit of half a vCPU. Drift-only checks run hourly;
30-minute apply convergence remains unchanged. This keeps ansible-pull from
starving the SonarQube workload.
Access¶
| Method | Target |
|---|---|
| Web UI | https://sonarqube.infra.realemail.app (Traefik + Authentik) |
| SSH | ssh root@192.168.6.101 (via prox/pct enter or patch-controller) |
Root-only guest (no someone user). operator_shell_enabled and
operator_tools_enabled are false so golden shell and uv/labctl do not run.