diff --git a/.drone.yml b/.drone.yml
index 9c0727c0..c7eb7fd6 100644
--- a/.drone.yml
+++ b/.drone.yml
@@ -29,7 +29,7 @@ steps:
       # Install Terragrunt
       - "wget -O /usr/local/bin/terragrunt https://github.com/gruntwork-io/terragrunt/releases/download/v0.99.4/terragrunt_linux_amd64"
       - "chmod 755 /usr/local/bin/terragrunt"
-      # Apply all stacks
+      # Apply all stacks (infra stack auto-skips in CI via terragrunt skip directive)
       - "cd stacks && terragrunt run --all --non-interactive -- apply -auto-approve"
 
   - name: Push commit
diff --git a/stacks/infra/terragrunt.hcl b/stacks/infra/terragrunt.hcl
index f01b00bf..c892d2fc 100644
--- a/stacks/infra/terragrunt.hcl
+++ b/stacks/infra/terragrunt.hcl
@@ -3,6 +3,9 @@ include "root" {
   path = find_in_parent_folders()
 }
 
+# Skip in CI - infra stack manages Proxmox VMs which require SSH to the hypervisor
+skip = get_env("CI", "") != ""
+
 # Override provider generation to include proxmox (instead of k8s providers)
 generate "providers" {
   path      = "providers.tf"