proxmox/docs/04-configuration/CONFIGURATION_TEMPLATES.md

# Configuration Templates

> Modern note: Some examples in this template library intentionally preserve older migration-era IPs and VMIDs for reference. Treat them as placeholders, not authoritative live values. For current RPC endpoints and node placement, confirm against `docs/04-configuration/RPC_ENDPOINTS_MASTER.md`, `docs/04-configuration/ALL_VMIDS_ENDPOINTS.md`, and `config/ip-addresses.conf`.

**Last Updated:** 2026-01-31  
**Document Version:** 1.0  
**Status:** Active Documentation

---

## Overview

Ready-to-use configuration templates with placeholders. Replace `<PLACEHOLDER>` with actual values for your environment.

---

## 1. ER605 / Edge Router (Conceptual)

```yaml
# Replace <PLACEHOLDER> with actual values
network:
  wan1:
    ip: <WAN1_IP>
    gateway: <WAN1_GATEWAY>
    netmask: 255.255.255.240
  wan2:
    ip: <WAN2_IP>
    gateway: <WAN2_GATEWAY>
  lan:
    subnet: 192.168.11.0/24
    gateway: 192.168.11.1
nat:
  port_forward:
    - public_ip: 76.53.10.36
      public_ports: [80, 443]
      internal_ip: 192.168.11.167
      internal_ports: [80, 443]
```

**See:** [ER605_ROUTER_CONFIGURATION.md](ER605_ROUTER_CONFIGURATION.md), [11-references/NETWORK_CONFIGURATION_MASTER.md](../11-references/NETWORK_CONFIGURATION_MASTER.md).

---

## 2. Proxmox Network (per host)

```yaml
# vmbr0: VLAN-aware bridge
# Replace <HOST_IP> with 192.168.11.10 (ml110), .11 (r630-01), .12 (r630-02), etc.
auto vmbr0
iface vmbr0 inet static
    address <HOST_IP>/24
    gateway 192.168.11.1
    bridge-ports eno1
    bridge-stp off
    bridge-fd 0
    bridge-vlan-aware yes
    bridge-vids 11 110 111 112 120 130 132 133 134 160 200-203
```

**See:** [02-architecture/NETWORK_ARCHITECTURE.md](../02-architecture/NETWORK_ARCHITECTURE.md).

---

## 3. Cloudflare Tunnel (config.yml snippet)

```yaml
# Replace <TUNNEL_ID>, <SERVICE_URL>, <ORIGIN_CERT_PATH> with actual values
tunnel: <TUNNEL_ID>
credentials-file: /etc/cloudflared/credentials.json

ingress:
  - hostname: rpc-http-pub.d-bis.org
    service: http://192.168.11.252:8545
  - hostname: explorer.d-bis.org
    service: http://<SERVICE_URL>
  - service: http_status:404
```

**See:** [cloudflare/CLOUDFLARE_TUNNEL_CONFIGURATION_GUIDE.md](cloudflare/CLOUDFLARE_TUNNEL_CONFIGURATION_GUIDE.md), [05-network/CLOUDFLARE_ROUTING_MASTER.md](../05-network/CLOUDFLARE_ROUTING_MASTER.md).

---

## 4. Besu Node (config.toml snippet)

```toml
# Replace <VMID>, <NODE_KEY>, <STATIC_NODES_PATH> with actual values
data-path = "/var/lib/besu"
genesis-file = "/etc/besu/genesis.json"

network-id = 138
p2p-host = "0.0.0.0"
p2p-port = 30303

rpc-http-enabled = true
rpc-http-host = "0.0.0.0"
rpc-http-port = 8545
rpc-ws-enabled = true
rpc-ws-port = 8546

# Permissioning (if used)
permissions-nodes-config-file-enabled = true
permissions-nodes-config-file = "<STATIC_NODES_PATH>"
```

**See:** [06-besu/BESU_NODES_FILE_REFERENCE.md](../06-besu/BESU_NODES_FILE_REFERENCE.md), [06-besu/BESU_ALLOWLIST_RUNBOOK.md](../06-besu/BESU_ALLOWLIST_RUNBOOK.md).

---

## Related Documentation

- [NETWORK_CONFIGURATION_MASTER.md](../11-references/NETWORK_CONFIGURATION_MASTER.md) - IP and port reference
- [ER605_ROUTER_CONFIGURATION.md](ER605_ROUTER_CONFIGURATION.md) - Router setup
- [cloudflare/CLOUDFLARE_TUNNEL_CONFIGURATION_GUIDE.md](cloudflare/CLOUDFLARE_TUNNEL_CONFIGURATION_GUIDE.md) - Tunnel setup
- [02-architecture/NETWORK_ARCHITECTURE.md](../02-architecture/NETWORK_ARCHITECTURE.md) - Full architecture