Built a Terraform module for managing Proxmox SDN declaratively: zone, VNets, subnets, host gateway IPs on the `vnet*` bridges, SNAT/masquerade rules, and dnsmasq DHCP from a single `vnets` map.
The two modes that ended up being most useful in practice:
Host-routed: Proxmox owns L3, NAT, and...