How kev1ndev/nimbustream works
NimbusStream is Terraform-defined AWS infrastructure for a private cloud-gaming and GPU-inference environment. The principal workflow is to supply deployment variables, apply the configuration, import its WireGuard client configuration, connect through the VPN, then stream from the private gaming VM. The README documents the key runtime capabilities and relationships; source excerpts were unavailable, so implementation details beyond the documented topology are not inferred.
Main entry points: main.tf Windows GPU VM · outputs.tf Connection outputs · SETUP.md Sunshine streaming · variables.tf Deployment inputs
Components 22
Deployment
- Deployment inputs
variables.tf - Terraform configuration
main.tf - Connection outputs
outputs.tf
Network and access
- Custom VPC
main.tf - Multi-AZ subnets
main.tf - Internet gateway
main.tf - WireGuard hub
main.tf - Security groups
main.tf
Gaming and inference
- Windows GPU VM
main.tf - Virtual display
docs/SETUP.md - Sunshine streaming
docs/SETUP.md - ViGEmBus controller
docs/SETUP.md - Ollama inference
main.tf
Operations and storage
- EBS volumes
main.tf - KMS encryption
main.tf - VPC Flow Logs
main.tf - SSM Session Manager
main.tf
Other components
- Operator
- AWS
- WireGuard client
- Moonlight client
- CloudWatch
Connections 29
- Operator → Deployment inputs: sets values
- Deployment inputs → Terraform configuration: configures
- Operator → Terraform configuration: applies
- Terraform configuration → AWS: provisions
- Terraform configuration → Connection outputs: exports
- AWS → Custom VPC: hosts
- Custom VPC → Multi-AZ subnets: contains
- Custom VPC → Internet gateway: routes through
- Multi-AZ subnets → WireGuard hub: hosts
- Multi-AZ subnets → Windows GPU VM: hosts
- Security groups → WireGuard hub: controls access
- Security groups → Windows GPU VM: restricts access
- WireGuard client → WireGuard hub: connects by VPN
- WireGuard hub → Windows GPU VM: tunnels traffic
- Connection outputs → WireGuard client: provides config
- Connection outputs → Operator: provides private IP
- Windows GPU VM → Virtual display: renders to
- Windows GPU VM → Sunshine streaming: runs
- Sunshine streaming → Moonlight client: streams video
- Moonlight client → Sunshine streaming: sends controls
- ViGEmBus controller → Windows GPU VM: provides controller
- Windows GPU VM → Ollama inference: runs
- WireGuard client → Ollama inference: requests inference
- Windows GPU VM → EBS volumes: uses storage
- KMS encryption → EBS volumes: encrypts
- Custom VPC → VPC Flow Logs: records traffic
- VPC Flow Logs → CloudWatch: sends logs
- Operator → SSM Session Manager: administers through
- SSM Session Manager → Windows GPU VM: manages