ansible for proxmox config

2026-03-09 22:20:13 -05:00
parent e8810195cd
commit 643fefb4bf
7 changed files with 481 additions and 182 deletions
--- a/ansible/group_vars/all/vault
+++ b/ansible/group_vars/all/vault
@@ -1,183 +1,194 @@
 $ANSIBLE_VAULT;1.1;AES256
-63353338616665346662303633333834363230646262363436323062363538663337393764303639
-3161636264306636303736383936616631613561366366320a663632653631653637646561633362
-33643765353031333232383531303436666232343463656130393530623938346132376264343235
-3833373666383930380a636136646438393464623334333963373038623830366165643831373230
-63393831613030383538663737643636316263366538633262656364353961313563643339643939
-64373238386463373765366236383831313763666666316639326632633839663866613430353334
-30653631313961656132393335316231386536613236333431616463633666366166643065393961
-66656434333436313162666432653132613238653730346130656437663031663037346564383164
-34613739646162313666633661353437623364356431646538633863363965613063363134646163
-34623030363534396561346433326132366466636132663831646230343266336130366437633034
-30666337626537383339663731326666353439653537303330633062633230306238306336656637
-62383332386361333864393365383265366265656162323330326333306564383831396666623234
-35613766623036663666353262346664323831623436353736326239343831353538336434623436
-63623435663830393866333733623235393035376566336630613963336531643739303337386637
-64323835313835643532346231633937363531646333386536383662353961316331653038653839
-36346166353563366139353865333263323039383031383837386566663532396132656530353939
-66613766336335663763323039356238626539376565656362633336643837383538383332613865
-34323961633539393765343962386431336438616139303838386463316566633836383035333739
-35316363626163323431633363616639303262653562643830356364653230336364306134343534
-65623736613839326439646463363037666639316235613230643864373538333562623636376133
-66336236353862376432366465353836393936623563333639306438396332363638313435653632
-36633361343931393866613433396436316161376438663265316232373832306239393263653962
-63613961343062616633633230663666303765643531646365616139323931316262653062376233
-37636236353165663639616339333231633633623036396263313832316162316330383835333138
-38373433396430316365396137326232353230653030303634633263653361643662346366623166
-64646263616463613461313966396231623562313831383266356639326361656662393364613334
-61316339663932633433623133346661346239373939326132653238346439656166313566633564
-33306237333938396430623937613231313064616433353163306538346466656130656533313233
-64346136363966383065353662323566383663383131633633373362626363663732356631633532
-39393861346661396630643366306237653462396634386336303834303233376235393332666263
-66663237643863393534633835333539343131333265623136306162363864333866623463623963
-61353266346664373531313463316432303430653432616261653133633737353636303431636266
-31326232313263386133396634343432663162643834366665663331343131343063353736656362
-34663166383963323030336630633030393163633335343330616532653538666665613066666264
-63333663316365663466316531643561353561623436613865346431363239616631373835633033
-65613731393038326632336538393033303131386536323832613563303765653930363266653166
-31396531613334666261653537666136323561663535633262373837636231666639376637646561
-66363235393337646330326464393065656137316131383066653631353536353436616435613638
-62653530333536313637366635633733333235396462613231373739313935386438633536326365
-34353032303635353031383866653731393138363933643166626663363764363336373337393233
-30303432616632653635353136383331363130346634626363353762313762616566666265303137
-64646131643132323836346333323062393933303636333937363662316133393930366237303064
-63353665623530636361613935663733303431336464323038353536313134396138333635646133
-38393731343866623030613339303439383165643338643739643730613531386536373664333864
-61353737633233316462326139613366313466323330343432383265333839356138393539663163
-36393333626134316538326436643535613538666131633839323835323161323031666662306539
-36393264393432386361623732613430616430353139373331313433336232363338383939343462
-33636132316161343735623933373430303339656461636334343561363564643362396639663834
-65303563656137646261666137636537333735343236363838366565316537323161623338633665
-61653839636361616466333065613165303139303930356264633233376334353565323539663638
-37323631336433666336363730643161313566326433396433306662323232363737356461363364
-33643037363033363336303363326133656634376566633936613236373365313438313163643631
-61393963373633313965346530656661626264376464363635653333366662363564386665353537
-65333738653936396236353538613565303939636162336561653235356565616637626239636166
-35396437363632633639666165363365303536666163663732323630616438326238656164646164
-61366334386363643063333230316238343663386433363635663031393130356236643630323261
-65636265323464373939633637633137346661663466303064336238346231303137386630626363
-65663732633630356339336534356436313566663731663532306235613736623536626464313265
-39356464336234326332656335373930646262633062323530643839656138616465653836666530
-65323934376438636332323136613636646636636161346636633761306566383339366233306163
-35623136336239333932316235623561323134663062393766393935656636633838373436623932
-66643361396232393534353035336130666132613634343264643632633466396231356264306461
-36623237313162353530393432666237323765656636623639386337313132353561333436343736
-30366439313064653431313535376435663265616364643065653564346432653134613936623932
-39316464353231646634313639303837393937353339666464363432313465376162653735376534
-36383034303535663530343939326661383333616132396639323832653731356164363038333939
-30306461343062623565336665306431653336656236656238303639333663663739353237633936
-39383434346161626363346265393132653664343033633765373337333235386134383732353839
-37303532396132386463346662616661333166383662336630613766636161636662666637383135
-30336531303161396565396137616463363665333632663064313338363765383937353961386236
-66633564623766376463663134636663303234386662323161633639626530353962636134636161
-30383931376639346132363162633832613533343338356630643838353764386139656132356663
-30363533393236356339333464393431313463346263656639626637633738636637386230616561
-36623138613662353834663838343036303435633166363735663731656639643137376334383330
-38316437393331646662336130333763366661396362666230656561336264613035346435336365
-36613938653530633232353963313137616131363365633032353737633965383564623938626138
-31383964353930656639613137373365316365663036353963313132653165303137316537623966
-30363636393261396562663961643863313362623766613737376632336331643965626366393432
-66633236643138326665323663383666306130393631376437636664313237383861616466303237
-64363465663730663662323764353235633933326662366265366661626332376539663031343130
-65313838666433386436616432306533353861653362306664613266376631623762383235363131
-36366338306633626338353665643361643965376263653531623465353333646530396431356164
-31303134383562336431326262356334373434646665333033393866653761393039363762366435
-62653732643465643863306366393165653534613166373436623937643737373863393532663933
-61636437393664356535616536363136373061633461303861303133616336646131326661633936
-62633861333865643164636162633239383236393561656530613333326361326463386263303530
-37396532343733353261633031393030353063623239363533333830353266323862653366383234
-39626461396535643663376531633335313333616431396637616664323565323962623332656535
-39386335646433353564343535653262653437353539623366616463643938393166323337646236
-37306532383932393932616439393366613566353136633738643138626335393865303439633163
-36373564366636623463333537633435326136373363636234663566373062333063393262633162
-61643463616536643736643964346230633339343530616339633261663963323238353964386534
-33313933323936666165333837373266383730666361666235376230623765323063396665643664
-31656336663536626530613166643839303661356262383838373132373533366331653939663165
-39363531336234663438366466363864383265616430346437393465653934343135366333623432
-35646438313132306336656635373932613337343232316662326563373137666235636132323539
-64316437663834303331353734313335666239326132373234636239323736653962663964656435
-63633865623034373161613465353861643634336263333565636336623231333838333333376561
-32383066316337396264353437313863316639373035313364616632613231313066613366386335
-65633265383437363938663036333761643639303466303234353032633539343466333162633032
-64646332396136646266363234636132636231353939386232643135353261306164623438383537
-37333335356338633365306461373838346665346561313337363364656330663564313963323832
-64613766656333393437376633636436343837636230386135366664326430303837353334303839
-38363239666561373231646265623063373165333739643539343131316163333831666663626431
-33613262636138616465373562356235343130613839373338646163366233633634623936626336
-35636163636130316139623035356636343136373061656465646331653933643836623030643333
-31396461363233663661643262666363393462303266323862616336646534666136313464383436
-65336133316163633966373861306139653030316264373662353462306230626361633562633633
-35356566326434353831633966646430643265663363666435316434366464663833656636343232
-32613336613235363933336533653730383263383236336333323664306566363735613237303231
-34643839366663333466346632353834636362326162666231666366623262373039313330353630
-38663432353634626130623464306166663537663533363130366165666361336363386665653137
-32383564393130666430656235646330353437326435653265346361343538323662383034333962
-30653736306636633333663033336138396465333931633464373365613539326532323835366536
-31323333363333356630396539623431663132653461616430616334376266376338623136353965
-36376133666163386434396237656663623063343738373937393039346333343137613034313936
-39636537343834313363363263623434613635643638356532393237616632333931323238356336
-35643631316236343365323933386561336134363163323539626631383237666362393939653032
-35396231363732623638323534386233666135623534366463646136643839643062666131303938
-35663963626264396665356232623266373731623663653530646530663737363163363733353266
-38323235326661663530313033356366343939636635353332366136313862346563393139393765
-64386466363139663934653634653563616331393034356461656635343737313032373761656137
-32643265613330333739373734613762383435613334396633376333346364306262313938396266
-66393233373236303430326464663830376438303332666461633834356565323438396566346563
-35333730633837356262373337366264653362306231663837313130623036373536653234363730
-64616330393864386462616562333130373433616162333036623762623635393961353238333432
-38323263666338376263366339303938613761323432626265613938653262336130313835323031
-64643230643532386633333133656634386539633139343666636262303262653866353162373035
-35363132653564393334366631613264346332653730396530623264313935633433633539396361
-31363737623535346465353332376563323330316135313339666639383763663363343430616362
-66653635373465303961643630646337626462306163326364653431633937303936376336613231
-39396364386164643130646237313939366331316464633461366536663537393062316362346361
-31393634383735383133643762356164623365643031363831376166346637613337383965653934
-39303063636266336363666639323134663134613762366561616531396238313435326262346366
-31316336383766346634313865313331616636633939666366626531313961363137363362613534
-61333839376465663362303533616538366264303466633736303462313763313332323630383733
-31633265363464633237356466386464303363653132616239633062353835323064393034646361
-65303832323663356238656335653636393264363566346532613339306465376332373430633733
-33636436346362303866393736366133623733363031303835386331336261656330313639613432
-61616666393366336464393132613332386332343138353838633165353437393333383763316366
-30663634346439376634386633386539383865393339383262376463323165643962656333613238
-30376333303166643731396131306563363963393862633133356464343934326539323239656362
-32303865333964393266626263336335643831353238366438326430663938653434653066613436
-61383535623866396666393965343135356532643064346265656539323436643263343663383131
-31626362383261313361353430333536363937663337656339623664316332343062633738316137
-66353164646639376634626238383536643437613730613934346130306631613436643330333832
-30383363636466333730353534373132636466613034313963663435616337646164356330623432
-37643161343137623938326465626632373931623664626264353866343966333738623861653066
-31626161323831353038306561366131393666333931346233386462333666343032363731616137
-35313331636562616137326237383065393934336563373435623964343032366432356335363935
-35633634666537303239323333313066376364613365313432373939663039323266373061386637
-39643930303733336632353065633566303465633939643130613963326535316236643134363832
-35353461363064386234663539366364613836383139656264663462393030613832363565656265
-61376335623338356466613534313765386134326161316533386538653238353663653764343463
-38613364646335303432656662366235666532386539376666336534313439646332326561646539
-31633863336161373832353834336131613433663336663031316437383638623533346533346236
-33656161666135613531353336313231663464316265653764636565663130363638393732643538
-64653338343239653733366661313339303234656364623663353662343930613364613332626139
-30366663313730636431363761626464376436363266646434316265643034303862383837303863
-62663562346636646334633834633232373064333964323636663532386336313332623366666334
-32303761616464386166343438636563323039333534373762323839383165323237393061616166
-62653264396132393432363134653231366362663566316335373266663534316364653162383864
-33633030356135363631333734303231326561623839353735643935343666326232343034666632
-38306531316361653538383330393635623239353765626336356433366661333365613739376166
-65616234643238366361666166616365396264636632376663393433653062333337663438663334
-66303065623439353766633435663834666430393132396363356366376634333463653036656662
-61366635383664353234313538373762616564343161663634313937623066373264623465633338
-32346630366633353363303137383764373632646261356634383036653065633734636264656535
-37666564386139316134373038363965373465643966373339386630386366653535626337663063
-63616539666661316437613161333735356162633966626336326662616234623937616566363366
-64383836313362396530333535326130653239386438313839313430383536623836353034353662
-36623534633062666366373066636133343232646464656435366235373434663566623137616635
-34343464323238633763666264633163366636343735353438386461666135326230376136353265
-33646334366661636138373466653061636137663063613865323931643437636366343061666461
-30346437366339666332636662373666663931393339373439363932326162373563633535316361
-30346634633863623736383034643533643734353265386434373163653138356236353034316462
-61653930323565303932333862363535396265633236646538633762336466616332326433613162
-63383138323065373837656263373062353934326437336265303538636239303564643338653065
-35643733383861343738623230653439393936656532313864356261326565373032316631363135
-35346564393138373934656133396333323139643139666133643866643534316136313766636433
-33626134343733623164613565306538613966633234313866613237326131613830646466636333
-3535656233643535386331353339666231646531616463356639
+37643934663536616237303639323934346232336238336163376663316432383061326431646164
+3836336631623533363261373533306539336432396633380a306263623835363265646561376336
+62623964396664636230313938643531366262383636303835383332373831613065653834373064
+6263643636326132320a653863663631313531646365386363376634633765643231303132323437
+63333638363439346638626564373939336331333466373438333363396664613937373562353234
+32633066663832373938666162396336306538313733643730363435346562653662396437393431
+39353866663636326662343465623763363165623065623139666637386638313533633961353330
+31353131623135613832363431396163373734396138366465323164643539393661623166623130
+33353037396637653432623061653262343138663837613462323265336138623236666633363132
+35316537663338313537636262623838613539653863636237393832353536353935633831353337
+37613663653831313534333065323666633863646466323463393137353732343034313833383738
+33303835373634313765383734393532616131336638636562326330636335376333633636326664
+61633764633130316566323338353734636230623638373731386237663733396535393037623961
+63396539326162383935323964363033663164343936346233653131613738326263636135626433
+64616436633430376461306637653462393339356631313964323161623931633937663932386262
+34343337353136633033656461396239633465373330373439316266303632666364383935316462
+65326234623639366662323866636435303664613163383163633638323535323362646431363465
+39366639373530313934336433363137333436643664363031363938663533386437393564613038
+64303264306166616233386463303638366665366136646539393236333832663835343237663030
+65346630613034333736336335623663303139326534336334356238316430393130346162313739
+61653435333634613233616431363231646562393635636235636331323839363735373763633064
+61616663616662323263383231323738346339356164323361613261643138366463393562376666
+37343864393632373434313839363265383439316562376265663139353361306438306630623532
+34383066383331346438633930326164396365633031633164306633363264353739316165303765
+37663535343130656137376565343933613964363637333131623630383364316166633538356436
+31653961363931373931323265656534343532323138303933363161613762383038306538323934
+33336536313264393863393131333639376435393234376665326130353233313365303638643132
+32386634653961373361663365396232306335663336333938666135393866343437613539393130
+36343264616633313565363236323931323736343030353532646137316535303530626564343837
+63393166313063633632303435323963373733646530333265643930613639633661376638376331
+30313038366137653836376636663936636462653163343231636665623366656132613064613238
+63376636383362326339343132363165386230366139613937643666303765356437393265633937
+33363430363564383636623537366464313363616430363232353461666466633339336163653162
+38393561646131323834366638373630333563313232346662363830636539383463356539646139
+62333231643739613063353762373132303036333136383163623764666332643931316264663833
+61373934633834353430353763643830386438633637333561323038373839336364636133663433
+34373136343463376463356435326364336334386436616438396466323537636162313934616662
+38353939633630346261613231316461353632623733633730333833386365396634303039346430
+34633662346565313133313161353937663233376435393730373465323233643133643662316463
+64323930663462316166386661623537383861303532646662303037323166363161303462346264
+32653330303733303430313233396435666131366334373266356535636361666532303536666563
+62316434613863373534643633323537633733633534643533633939663063356564383336646337
+62363865386362666138663464383632653537313766616661316231326466636330383635613530
+38633533306265356162353465376439326134346566316464393564373261303566623139313531
+33326464316265353336613939623761316161393163393333656664326166316232323537353065
+38656535373236653266396564613362623131633461356230303033356563366330366530333263
+33663531623733373561666538626566393034323030653236663661306536626231346564613331
+66373736663362373962646463663831313033356535626131633565343735366536323232383166
+62643236623461636339366631333438313830633631616539343166663138366236366564623637
+31656236326539336331623437656636373263373364373561646265653133336336313937353438
+32343635646362653237333036306665373037323663383532393162383365336462373930663235
+64376237333934356239313062326665373932356539623534363562333264383066333932386435
+66376162343832613663303836363933636662643564646235633262643234623536363264383265
+64313563353066636533626138343131623165326234363161333735646537376532633563656466
+38663933353833653563353537643933366534366138346565353136343262653162643762363537
+33353363326533306661656466386637353337303531313036333539623537306330346138623962
+64626230383766626335383462303832376434663237303962636538393661623861343164333837
+63303466313733626134383236613764356338333566313033346633626439656137373430393432
+64323634656331636234373563613066396565306332616537623537613462646161333433653736
+36393337313937666631303663633362396432623162326537363935366230646361346639356130
+65333639373237393065336235646162303636313736616366663531333134336339356533316237
+62316236373534313061316135663938633962373265333165333438633063303535326634366362
+63366631336265313331653761336562353933343930336331303134326135646531306333353064
+37613036656164643038393339613862393031656564666266633137646336323036336532363866
+36363765396563376463393561333666653432303861343163313839303031363933396361343636
+66613862373439393030623232653062633031306133323666633738646639646433303266393137
+32636233633964633937663132346533376130373139626233633466356632323934316131343836
+65636631396236386464336263666238376330626665343833356539623263323861613566366131
+63386532633534356236623738326639656238666430373439346264306164646432313065656366
+37663035643932626230396565346436633137633561636263616265366162383036643561346661
+36343738353039396466346434633762653164663734396161366466616133626330373962373336
+61326336393538316363353334316232333933313639326363623432393136363135653635303635
+63333464646166313066636334656362356330336236346363616566613262333730383034626163
+30323161316365656135383032616238633263336632313537663938366236633561666138336563
+62616335343733613831343762336639333361356439623039316234343530396463633638633263
+39623764623239653839343930636337356366356130343263366462363136633535613037313833
+62396237663930346563626431376137323161656332373566393865343735313064363832393631
+38393238376434303034343361393361643266646335316138666433616132343137346633636436
+35393830383731303736373332376266356466326534366136303766343262363931396530646637
+64643938353066643337376231623132333835363437353033363939653237393733653662356633
+37303033666238313965666335376139666261626539383333313665666530633832663765336262
+62613565626639656630663836383134333436326361613630353037306561633262616463623862
+63396636323633356431306663336436346136666266363632343338363738653564666436386137
+35373363646663663564643162326639646564346564616430633832643661366664393639396664
+38613139303032343336373366386235313133643033373132333739633131373563613837303765
+64313139356638353266656136613263663739383134373964373832316334663661356566646465
+65343763383663343134633030613039346330666236346363633234616132326465333236326233
+34303262613834623362613232626463326636383163346430346564353833363230313633316437
+66333239616162633033306237643362316564613839383461306261636161393931373862393365
+31626239633439303166343935363638353537646437613962323437613737646465366136633633
+31623731633733366363336330623865616664383964613037663132356638653363353939363735
+37383136326465323633366432613034653532616635373130636465653837363763316530643136
+62633434323436303636343037383463643565613365396361316365643936383938623730303362
+61366365623336393834383734346330313737393631323632323631306563623163613862363837
+62376161313739323933663836303439646661306632613861306430373133613866353431393238
+38643762613936666164336231623532363666323438636163663639616337303032313265333738
+31343330343539316130616266383364383463303861623933306631343738383033666461343536
+62376630363264383061353531663033376134313262643739346531386639653739383535646337
+37396662366135643264653562663031303738643833306139383538333565616531663538346536
+31326462353734643065373765646332653464336237333761643833656136613838363162393264
+30333537363435313566613636393764393363646364613632653430313632343130303534313237
+66336262663238326662653834316163396666636133383632326362646533303736393835666461
+61376638343935353636313335323037353965356633633638333562363731366232613838313966
+31633762653630313364303764333638316635646138343335326537333936353233343232613939
+37613533313863323034623336343230633833333036313034376362353334373565633164346430
+35346361643630656133386438326631393837356136396334643361333266393762343034353934
+38636362363762333239613638313538656636653237656636613438333134666535663365393934
+66303564363330343664383739353563636537346638353635656132363465353237326133333533
+32363736623866656537353962333435613261633838333661353832646264336466386130623733
+34393932613032613439666336633066306261653130383065333863333663646465613762663930
+33316366386463656130373238366531376337383434363965393431633766616430383631633331
+30373662623639616463643962383365373763653139613232656533336338656461343362383931
+31663966646236313630636539656266373531323764356166393137336234616634373730346466
+31636330383866343633386162663632353433313065363335333965623065336237646538316533
+39393132313462356135633166613164313565303161303130353532383231613561623965376135
+63653236626263626266633532383161346633336162663263613034653166366461386365633839
+34633134363836346435303937363330613135633861626436666132306636363334313032353739
+64613138303833613462643363656435303537343665666634313031343331623836663262386633
+66613632656439656664343535353632653963333464323930646266666137363962306263663463
+30663136346435663062373765656234373265393936333438316461333466633531663862623363
+39656430656536353339646139623932636365653861363231613934336464333934323334376331
+64316438646235616361663838356165613734363838303662616439626137326135373531316166
+65643964303132653433643634313764393230373965636164376636353166643364373732383935
+32343865366461313537393961346333613234613834366237313064303930316633303765623064
+32303737363363336230653831613738333665613163646539613935623730666132613934626531
+31626666636538343862393434303032663135363861313532656334643439313162623830346233
+30636432616535616331366637383265373339663365316430326430383036333535666635323338
+66613065663666323864306431396364333637323166306634383864666533613839653132303132
+32616435646236646563663062303237313064643466326363343431633332346166656134366632
+63636165653163363063323838366666653439653565353162336232363031363762323861633665
+61313933326161386430393632383764303235353537616637346139373031643334383134326136
+65386237353538323336656238643938353132373961333462316463333037383931353966613730
+63326561616133313236326132366331653837623164623336656161623834653261616562323335
+65663034666164323961383565373732336430373931646533333063353461346233363263343638
+66366162623135373739346566643939333466346336323034373637623739326634366633313734
+66313130613734313066323363376363396630643063336166666563383530323466333435386337
+35383135396639623364373232626434646336353031363036323865323730366162633334343236
+34333563656134666162363465333865303966656633663862636230386461646562353732363830
+66323164356432386361333332633934613539363334333239643662626162646139376638623037
+36636362396435303762366365396465393231396631636133623236326133336235633865643439
+33373665356266333263333130366230393430323265653433666138383562623561623239633264
+37383337353030343531383565316562643933336233306136306564323838663338643439613030
+63616561366332356536643364393961323935373732373236316339313361323531363034323339
+35326535653962376436663136653139376639333535323962303265633563656130366561343432
+64663366343865303064636562303532333533626539633334306234666261646632666637626636
+36623966636464633337666231343735343862623337383831323765396531396235306638643435
+31313035373966363433383431373734323536353731646539656631356438393538623637613563
+33306166306531343136316261333465376564353732623662356530386339316565393339616534
+36353065343933386630313661353331366333313663353266353435646430363335626230663537
+62613063396334623935353639336136313231373830653565626333666337323161636333393263
+36313132316230656364323139346231323734303538396239356230346563653632653766376237
+33616563363139386163366565323532383863353132356139636138626161626331633763623562
+38306163633538316533366139646433363763333835653235653164386636643136396130323362
+36633432333538383762623339623631653266333536313762343661386537313034633630353733
+37663466613265326639393261386436643036386261316337353330303034303539373362616238
+33316635373166366633363537646136396333393434663430383532636561346632353831313761
+32666430623538396431366464613930353539366530616439363664343439623961613431393437
+65306466346161666131303938386132663364663866333037623639366139363131636261386230
+65333338383364663732333235346636653236383265653061616236343236613337356434303936
+63666335633735323962636235326437353736326563386231616638343962366337353831613831
+30643239396536666462393562393466636238306439396161653637303361343463626331616331
+62353838366330666338356432313834303737653833633337666635633166633537336338313739
+31653464626331656438663461356166363739636430353061356162656361336366353464353866
+63363535313635626530356538366663336461353566363966353965643231626136386631616437
+37636135333931316239303562393834323834643265323463613666373434653734656463333633
+39323466646132333463643566613531346563656430316238333933663633313230313866383239
+33383932393235616331613032373031393430333938623238613333613736386563373561386639
+34303661373964353832653431626536396465626361646365316632616363613338656132376634
+61656435623139363565653530323161616134396539653965393634393237643830663763663138
+33623730366132313163653537363936653530373665656464303839656163643864363064656566
+62333363613537643234303237656139333431666261646530643562666538653434373130666135
+35646133373033323634306236323265623130323364613365376436636564376464313562323563
+35373134303333323661353430323535613965623938303839373833313464353035373936363339
+65343230373137333938666133393666626137623434376463663832323337306432323237633163
+30356338393338333664313033646331663834336338623934383636306530323735643230656139
+39396631313563613832343134313263316537643363623836643739663763306137623634653230
+30343436383163336165313764373637633366366332303537616137646564366531653961386630
+34366438663632383166613935313337633133356430613665396339393135393961373963386431
+62393333626366383463316463343662346266343630373330316465633434343834626431313731
+33373964303962353132346631323038666535636666353132653765393937333435313732313834
+39613138363362363964353465333432653735653262303863303733653063646533396531366162
+37333133623466326438383964393561653463356137623133303130333666666437386561656463
+64353835643762623233343364353366653236373063353232393966313130316630613432653134
+62633465623335373861633439353931653530333436333031356338393632656661343237663763
+36346166653662303366633032623461333135313465636430303838396435643238393637643834
+62393831663261353961356261663834623435613861383336336365623739386364323063636131
+36613530613036383562393266323861336131376362383332303766613732316563636165643661
+33336564376464653063366338633739346466363966386561633431663466313066366264393532
+38393963313064663537393361343062363632343431643262363431643465633963333836666666
+63386239393139613435623330616361303966666138383733303639313539366661386161393030
+38653264333033323830626632636562636132336131666535333663396163303039386530653034
+32346230626264653462353366616263353735663961633466633630373263623834343533666338
+36323035303834393438373530336262633364356137356237363430373638343633
--- a/ansible/group_vars/proxmox/oidc.yml
+++ b/ansible/group_vars/proxmox/oidc.yml
@@ -0,0 +1,19 @@
+---
+# ansible/group_vars/proxmox/oidc.yml
+#
+# Proxmox OIDC configuration for Authentik integration.
+# Client credentials come from vault.yml.
+
+proxmox_oidc_realm_name: "authentik"
+proxmox_oidc_issuer_url: "https://authentik.local.mk-labs.cloud/application/o/proxmox/"
+proxmox_oidc_username_claim: "username"
+proxmox_oidc_scopes: "openid email profile"
+proxmox_oidc_autocreate: true
+proxmox_oidc_default_realm: false
+proxmox_oidc_comment: "Authentik SSO"
+
+# ACL entries - grant your Authentik user admin access
+proxmox_oidc_acl_entries:
+  - path: "/"
+    user: "rblundon@authentik"
+    role: "Administrator"
--- a/ansible/playbooks/configure_proxmox_oidc.yml
+++ b/ansible/playbooks/configure_proxmox_oidc.yml
@@ -0,0 +1,20 @@
+---
+# ansible/playbooks/configure_proxmox_oidc.yml
+#
+# Configures Proxmox OIDC authentication with Authentik.
+# Only targets one node since realm config is cluster-wide.
+#
+# Usage:
+#   cd ansible
+#   ansible-playbook -i inventory.yml playbooks/configure_proxmox_oidc.yml
+#
+# To also set up ACL entries for your user:
+#   ansible-playbook -i inventory.yml playbooks/configure_proxmox_oidc.yml \
+#     -e '{"proxmox_oidc_acl_entries": [{"path": "/", "user": "rblundon@authentik", "role": "Administrator"}]}'
+
+- name: Configure Proxmox Authentik OIDC
+  hosts: main-street-usa
+  become: true
+  roles:
+    - role: proxmox
+      tags: [proxmox-oidc]
--- a/ansible/playbooks/roles/proxmox/defaults/main.yml
+++ b/ansible/playbooks/roles/proxmox/defaults/main.yml
@@ -0,0 +1,24 @@
+---
+# Proxmox Authentik OIDC Configuration
+proxmox_oidc_realm_name: "authentik"
+proxmox_oidc_issuer_url: "https://authentik.local.mk-labs.cloud/application/o/proxmox/"
+proxmox_oidc_username_claim: "username"
+proxmox_oidc_scopes: "openid email profile"
+proxmox_oidc_autocreate: true
+proxmox_oidc_default_realm: false
+proxmox_oidc_comment: "Authentik SSO"
+
+# Client credentials - override via vault
+proxmox_oidc_client_id: "{{ vault_proxmox_oidc_client_id }}"
+proxmox_oidc_client_key: "{{ vault_proxmox_oidc_client_key }}"
+
+# ACL mappings for Authentik users
+# Format: list of dicts with path, user or group, and role
+proxmox_oidc_acl_entries: []
+# Example:
+#   - path: "/"
+#     user: "rblundon@authentik"
+#     role: "Administrator"
+#   - path: "/"
+#     group: "admins-authentik"
+#     role: "Administrator"
--- a/ansible/playbooks/roles/proxmox/tasks/main.yml
+++ b/ansible/playbooks/roles/proxmox/tasks/main.yml
@@ -0,0 +1,12 @@
+---
+# ansible/roles/proxmox/tasks/main.yml
+#
+# Main entry point for the proxmox role.
+# Add existing tasks above the OIDC include as needed.
+
+- name: Configure Authentik OIDC authentication
+  ansible.builtin.include_tasks: oidc.yml
+  tags:
+    - proxmox-oidc
+    - oidc
+    - authentik
--- a/ansible/playbooks/roles/proxmox/tasks/oidc.yml
+++ b/ansible/playbooks/roles/proxmox/tasks/oidc.yml
@@ -0,0 +1,62 @@
+---
+# ansible/roles/proxmox/tasks/oidc.yml
+#
+# Configures Proxmox to authenticate against Authentik via OpenID Connect.
+# This only needs to run on ONE node in the cluster since realm config
+# is stored in /etc/pve/domains.cfg (cluster-wide via pmxcfs).
+
+- name: Check if OIDC realm already exists
+  ansible.builtin.command:
+    cmd: pveum realm list --output-format json
+  register: proxmox_realms
+  changed_when: false
+
+- name: Parse existing realms
+  ansible.builtin.set_fact:
+    proxmox_realm_exists: >-
+      {{ proxmox_realms.stdout | from_json | selectattr('realm', 'equalto', proxmox_oidc_realm_name) | list | length > 0 }}
+
+- name: Add OIDC realm for Authentik
+  ansible.builtin.command:
+    cmd: >-
+      pveum realm add {{ proxmox_oidc_realm_name }}
+      --type openid
+      --issuer-url {{ proxmox_oidc_issuer_url }}
+      --client-id {{ proxmox_oidc_client_id }}
+      --client-key {{ proxmox_oidc_client_key }}
+      --username-claim {{ proxmox_oidc_username_claim }}
+      --scopes {{ proxmox_oidc_scopes }}
+      --autocreate {{ proxmox_oidc_autocreate | ternary('1', '0') }}
+      --comment "{{ proxmox_oidc_comment }}"
+      {% if proxmox_oidc_default_realm %}--default 1{% endif %}
+  when: not proxmox_realm_exists
+  no_log: true
+
+- name: Update OIDC realm for Authentik
+  ansible.builtin.command:
+    cmd: >-
+      pveum realm modify {{ proxmox_oidc_realm_name }}
+      --issuer-url {{ proxmox_oidc_issuer_url }}
+      --client-id {{ proxmox_oidc_client_id }}
+      --client-key {{ proxmox_oidc_client_key }}
+      --username-claim {{ proxmox_oidc_username_claim }}
+      --scopes {{ proxmox_oidc_scopes }}
+      --autocreate {{ proxmox_oidc_autocreate | ternary('1', '0') }}
+      --comment "{{ proxmox_oidc_comment }}"
+      {% if proxmox_oidc_default_realm %}--default 1{% endif %}
+  when: proxmox_realm_exists
+  no_log: true
+
+# --- ACL Configuration ---
+
+- name: Configure ACL entries for OIDC users
+  ansible.builtin.command:
+    cmd: >-
+      pveum acl modify {{ item.path }}
+      {% if item.user is defined %}--users {{ item.user }}{% endif %}
+      {% if item.group is defined %}--groups {{ item.group }}{% endif %}
+      --roles {{ item.role }}
+  loop: "{{ proxmox_oidc_acl_entries }}"
+  loop_control:
+    label: "{{ item.user | default(item.group) }} -> {{ item.role }} on {{ item.path }}"
+  when: proxmox_oidc_acl_entries | length > 0
--- a/docs/proxmox-authentik-oidc.md
+++ b/docs/proxmox-authentik-oidc.md
@@ -0,0 +1,151 @@
+# Proxmox VE + Authentik OIDC Integration Guide
+
+## Overview
+
+This guide configures SSO for the `magic-kingdom` Proxmox cluster using Authentik as the OpenID Connect identity provider. The realm configuration is cluster-wide (stored in `/etc/pve/domains.cfg`), so it only needs to be applied to one node.
+
+**Components:**
+- **Authentik** — `authentik.local.mk-labs.cloud` (behind lightning-lane/Traefik)
+- **Proxmox cluster** — `main-street-usa` (.11), `tomorrowland` (.12), `fantasyland` (.13)
+
+---
+
+## Part 1: Create the Authentik OIDC Provider (Manual)
+
+1. **Log in** to Authentik admin at `https://authentik.local.mk-labs.cloud/if/admin/`
+
+2. **Navigate to** Applications → Applications → **Create with Provider**
+
+3. **Application settings:**
+   - Name: `Proxmox VE`
+   - Slug: `proxmox` (this becomes part of the issuer URL)
+   - Group: `Infrastructure` (optional, for organization)
+   - Launch URL: `https://main-street-usa.local.mk-labs.cloud:8006`
+
+4. **Click Next** → Select **OAuth2/OpenID Connect**
+
+5. **Provider settings:**
+   - Name: `Provider for Proxmox VE` (or accept auto-generated)
+   - Authorization flow: `default-provider-authorization-implicit-consent`
+   - Client type: `Confidential`
+
+6. **Redirect URIs** (Strict) — add one per Proxmox node:
+   ```
+   https://main-street-usa.local.mk-labs.cloud:8006
+   https://tomorrowland.local.mk-labs.cloud:8006
+   https://fantasyland.local.mk-labs.cloud:8006
+   ```
+   > **Important:** No trailing slash. Include the `:8006` port.
+
+7. **Signing Key:** Select your certificate (not the default self-signed — use one generated from your Cloudflare wildcard or create a dedicated one in Authentik under System → Certificates)
+
+8. **Scopes:** Ensure these are selected:
+   - `openid`
+   - `email`
+   - `profile`
+
+9. **Subject mode:** `Based on the User's username`
+
+10. **Click Submit**
+
+11. **Record the credentials:**
+    - Go to the newly created provider → copy **Client ID** and **Client Secret**
+    - The **Issuer URL** will be: `https://authentik.local.mk-labs.cloud/application/o/proxmox/`
+
+---
+
+## Part 2: Store Credentials in Ansible Vault
+
+```bash
+cd ~/homelab/ansible
+
+# Create the vault file (if it doesn't exist)
+ansible-vault create group_vars/proxmox/vault.yml
+
+# Add these variables:
+vault_proxmox_oidc_client_id: "<client-id-from-step-11>"
+vault_proxmox_oidc_client_key: "<client-secret-from-step-11>"
+```
+
+---
+
+## Part 3: Run the Ansible Playbook
+
+```bash
+cd ~/homelab/ansible
+ansible-playbook -i inventory.yml playbooks/configure_proxmox_oidc.yml
+```
+
+This will:
+- Add the `authentik` OIDC realm to Proxmox (or update it if it already exists)
+- Grant `rblundon@authentik` the `Administrator` role at the root path
+
+---
+
+## Part 4: Verify
+
+1. **Open** any Proxmox node's web UI (e.g., `https://main-street-usa.local.mk-labs.cloud:8006`)
+2. **On the login screen**, select **Realm → authentik** from the dropdown
+3. **Click Login** — you'll be redirected to Authentik
+4. **Authenticate** with your Authentik credentials
+5. **You should be redirected** back to Proxmox, logged in as `rblundon@authentik`
+
+---
+
+## Part 5: DNS Records (if not already created)
+
+On `monorail` (Technitium DNS), ensure each Proxmox node has an A record:
+
+```
+main-street-usa.local.mk-labs.cloud.   A   10.1.71.11
+tomorrowland.local.mk-labs.cloud.      A   10.1.71.12
+fantasyland.local.mk-labs.cloud.       A   10.1.71.13
+```
+
+Also ensure `authentik.local.mk-labs.cloud` points to `lightning-lane` (`10.1.71.35`).
+
+---
+
+## Troubleshooting
+
+**"OIDC request failed (500)"**
+- Proxmox must be able to reach Authentik's HTTPS endpoint. Verify from a Proxmox node:
+  ```bash
+  curl -s https://authentik.local.mk-labs.cloud/application/o/proxmox/.well-known/openid-configuration | jq .
+  ```
+- If using a non-public CA, add it to each Proxmox host:
+  ```bash
+  cp your-ca.crt /usr/local/share/ca-certificates/
+  update-ca-certificates
+  ```
+
+**"User name too long" error**
+- Ensure `username-claim` is set to `username`, not `sub` (the default `sub` generates a UUID that exceeds Proxmox's username length limit)
+
+**Redirect URI mismatch**
+- The redirect URIs in Authentik must exactly match the URL you access Proxmox from, including port and absence of trailing slash
+
+**User logs in but has no permissions**
+- The ACL task in the playbook grants `Administrator` to `rblundon@authentik`. Verify with:
+  ```bash
+  pveum acl list
+  pveum user list
+  ```
+
+---
+
+## File Reference
+
+```
+ansible/
+├── roles/proxmox/
+│   ├── defaults/main.yml           # Default OIDC variables
+│   └── tasks/
+│       ├── main.yml                # Includes oidc.yml
+│       └── oidc.yml                # OIDC realm + ACL tasks
+├── group_vars/proxmox/
+│   ├── oidc.yml                    # OIDC config values
+│   └── vault.yml                   # Client ID/Secret (encrypted)
+└── playbooks/
+    └── configure_proxmox_oidc.yml  # Run against main-street-usa
+```