That's exactly what I'm having mine build, start9 clone directly on proxmox with terraform and Ansible on LXCs. So every time someone adds a service you can just use their playbook, no need for an additional packaging layer.