ProxmoxVEx is a self-hosted web application that layers multi-cluster management, automation and observability on top of Proxmox VE and VMware ESXi.
Backend
- Python / Flask — REST API, WebSocket gateway and plugin runtime.
- PostgreSQL — primary datastore for configuration, audit logs and encrypted credentials.
- SQLAlchemy — ORM and migrations.
- Celery / Redis — background task queue for snapshots, backups and scheduled jobs.
- Server-Sent Events & WebSockets — live metrics and event streaming to the browser.
Frontend
- React — single-page application bundled for production.
- Tailwind CSS — utility-first styling.
- noVNC / xterm.js — browser console and terminal access.
- Chart.js — metrics and capacity charts.
Security
- RBAC — role-based access control with custom roles and resource-level permissions.
- SSO & MFA — LDAP and OIDC sign-in, TOTP and WebAuthn/FIDO2 second factors.
- API tokens — scoped tokens for automation and third-party integrations.
- Encryption at rest — sensitive fields encrypted with Fernet; audit logs HMAC-signed.
- Audit logging — tamper-evident record of every security-relevant action.
Extensibility
- Plugin model — self-contained plugins with manifest, UI bundle, i18n and background tasks.
- Plugin marketplace — 70+ plugins gated by subscription tier.
- Licensing service — separate FastAPI service for subscriptions, tiers and entitlements.
Deployment
ProxmoxVEx can run from a release archive, as a Debian package, Docker container, Helm chart or LXC appliance. The landing site is built as a static Astro site and served by the included systemd service behind a Cloudflare Tunnel.