lae

I guess that would work. We'd need to change the task to a `copy` or `template` task, and probably also keep the `blockinfile` task but with `state: absent` for removing...

`pvecm add` (when you go to manually stand up a cluster) iirc does this to disable weak ciphers, so this task emulates that behaviour. Is it erring out somehow?

I guess there was another reason - from: https://git.proxmox.com/?p=pve-cluster.git;a=blob;f=data/PVE/Cluster/Setup.pm;h=1f064775af3cc4b2ac12a59d7d8abb7283f4b998;hb=HEAD#l162 ``` # changed order to put AES before Chacha20 (most hardware has AESNI) ``` I'm not sure if making something that's...

Some further research: https://lists.proxmox.com/pipermail/pve-devel/2017-August/028157.html Discussion behind the change to the ordering of ciphers https://old.reddit.com/r/sysadmin/comments/c62owo/10_gbits_connection_but_only_1_gbits_via_scp/ Real world example of performance degradation with chacha20 on 10gbit vs AES I vote that we...

For the record, I think I had this working in the 'feature/letsencrypt` branch back in September but haven't merged it yet because of distractions.

I want to avoid the use of `command` calls here as it's difficult to guarantee that they're idempotent. If you take a look at https://github.com/lae/ansible-role-proxmox/tree/feature/letsencrypt you'll see that I currently...

It's been a while (dang...almost 2 years...) so I don't really remember. The branch will need to be rebased on develop first of all. A quick perusal through the script...

Thanks for rebasing. It looks like the changeset is incomplete (other than my requests above). `pve_domains_cfg` needs to be given as a default in `defaults/main.yml`, otherwise it breaks deployment on...

That sounds like a good idea. I'm not 100% sure if the firewall rules files can be templated or if you need to use pvesh or something to modify them....

So, this role doesn't have it (yet) but in another of my roles, I have an `examples/` directory where I drop example configurations, playbooks, templates, etc that people can refer...