fix 🐛: Remove secrets.yml and task comment

This commit removes the inclusion of the `secrets.yml` variables file and comments out the associated task. This simplifies the project setup and addresses potential security concerns related to storing sensitive information in the codebase. The task is now commented out, effectively disabling it without removing the code.

collections/requirements.yml

@@ -3,3 +3,7 @@
 collections:
 # Install a collection by name
 - name: community.proxmox
+- name: community.general
+- name: community.docker
+- name: community.windows
+- name: joshrnoll.homelab

roles/requirements.yml

@@ -1,13 +1,24 @@
 # requirements.yml
-- src: arillso.localization
+# - src: arillso.localization
 
 # Role hosted in your private Gitea instance
 - name: ansible_samba_ad_dc
   src: https://repo.piave7.duckdns.org/Jose/ansible_samba_ad_dc.git
   scm: git
-    
+
+- name: ansible_proxmox_vm
+  src: https://repo.piave7.duckdns.org/Jose/ansible_proxmox_VM.git
+  scm: git
+
+- name: ansible-playbook-homelab
+  src: https://github.com/joshrnoll/ansible-playbook-homelab.git
+  scm: git
   # version: master # or a specific tag/branch like 'v1.0.0'
 
+- name: ansible-role-debian_common
+  src: https://repo.piave7.duckdns.org/Jose/ansible-role-debian_common.git
+  scm: git
+
 # - name: ansible_samba_domain_member
 #   src: git@repo.piave7.duckdns.org:Jose/ansible_samba_domain_member.git  # <-- Use the SSH URL
 #   scm: git

tasks/create_proxmox_debian_template.yml

@@ -0,0 +1,240 @@
+---
+- name: Build Debian Cloud Template directly from Proxmox
+  hosts: node0
+  become: true
+  gather_facts: false
+
+  vars_files:
+  - ../vars/debian_template.yml
+
+  vars:
+    lxc_name: "debian-builder"
+    # lxc_id: 9900
+    lxc_storage: "local-lvm"
+    # lxc_storage: "hdd8t"
+    lxc_template: "local:vztmpl/debian-13-standard_13.1-1_amd64.tar.zst"
+    lxc_ostype: "debian"
+    lxc_cores: 4
+    lxc_memory: 4096
+    lxc_swap: 0
+    lxc_net: "name=eth0,bridge=vmbr0,ip=dhcp"
+    lxc_rootfs_size: "8G"
+    lxc_password: "password"
+
+  tasks:
+    - block:
+
+      - name: Ensure build environment packages are installed on Proxmox
+        ansible.builtin.apt:
+          name:
+            # - libguestfs-tools
+            # - qemu-utils
+            - rsync
+          state: present
+          update_cache: true
+
+      - name: Ensure QEMU template directory exists on Proxmox host
+        ansible.builtin.file:
+          path: /var/lib/vz/template/qemu
+          state: directory
+          owner: root
+          group: root
+          mode: '0755'
+
+      - name: Combine SSH public keys into one file
+        ansible.builtin.copy:
+          dest: '{{ ssh_keys_file }}'
+          content: |
+            {% for key in ssh_public_keys %}
+            {{ key }}
+            {% endfor %}
+          mode: '0644'
+
+      - name: Create LXC build container
+        ansible.builtin.command: >
+          pct create {{ lxc_id }} {{ lxc_template }}
+          --hostname {{ lxc_name }}
+          --password '{{ lxc_password }}'
+          --ssh-public-keys '{{ ssh_keys_file }}'
+          --cores {{ lxc_cores }}
+          --memory {{ lxc_memory }}
+          --swap {{ lxc_swap }}
+          --ostype {{ lxc_ostype }}
+          --net0 {{ lxc_net }}
+          --storage {{ lxc_storage }}
+          --features nesting=1
+          --start
+        args:
+          creates: "/etc/pve/lxc/{{ lxc_id }}.conf"
+
+      - name: Check if LXC container {{ lxc_name }} is running
+        ansible.builtin.command:
+          cmd: pct status {{ lxc_id }}
+        register: pct_status
+        changed_when: false
+
+      - name: Start the LXC container {{ lxc_name }} if stopped
+        ansible.builtin.command:
+          cmd: pct start {{ lxc_id }}
+        when: "'status: stopped' in pct_status.stdout"
+        register: start_result
+        changed_when: "'status: stopped' in pct_status.stdout"
+
+      - name: Wait until container has an IP address
+        ansible.builtin.shell: "pct exec {{ lxc_id }} -- hostname -I | awk '{print $1}'"
+        register: lxc_ip
+        until: lxc_ip.stdout != ''
+        retries: 10
+        delay: 5
+        changed_when: false
+        failed_when: lxc_ip.stdout == ''
+        
+      - name: Add temporary LXC to in-memory inventory
+        ansible.builtin.add_host:
+          name: lxc_builder
+          ansible_host: "{{ lxc_ip.stdout }}"
+          ansible_user: root
+          ansible_password: "{{ lxc_password }}"
+
+          ansible_ssh_common_args: '-o StrictHostKeyChecking=no'
+
+- name: Customize Debian cloud image inside LXC
+  hosts: lxc_builder
+  become: true
+
+  vars_files:
+  - ../vars/debian_template.yml
+
+  tasks:
+    - block:
+
+      - name: Install build dependencies in LXC
+        ansible.builtin.apt:
+          name:
+            - qemu-utils
+            - libguestfs-tools
+            - curl
+            - wget
+            - rsync
+            - xz-utils
+            - nano
+            - htop
+          state: present
+          update_cache: true
+
+      - name: Ensure sudo is installed
+        ansible.builtin.apt:
+          name: sudo
+          state: present
+
+      - name: Create working directory
+        ansible.builtin.file:
+          path: "{{ workdir }}"
+          state: directory
+
+      - name: Download latest Debian genericcloud image
+        ansible.builtin.get_url:
+          url: "{{ debian_image_url }}"
+          dest: "{{ workdir }}/{{ image_name }}"
+          mode: "0644"
+          force: true
+
+
+      - name: Get QCOW2 image info
+        ansible.builtin.shell: "qemu-img info {{ workdir }}/{{ image_name }}"
+        register: image_info
+
+      - name: Show QCOW2 image details
+        ansible.builtin.debug:
+          msg: |
+            === QCOW2 Image Info ===
+            {{ image_info.stdout }}
+
+
+      - name: Customize image with base utilities and root password
+        ansible.builtin.command: >
+          virt-customize -a {{ workdir }}/{{ image_name }}
+          --install "curl,wget,nano,rsync,htop"
+          --root-password password:{{ root_password }}
+
+      - name: Set DHCP identifier to hostname for cloud-init
+        ansible.builtin.shell: |
+          virt-customize -a {{ workdir }}/{{ image_name }} \
+          --run-command "echo 'dhcp-identifier: hostname' >> /etc/cloud/cloud.cfg.d/99_hostname.cfg"
+
+      - name: Reset machine-id
+        ansible.builtin.shell: |
+          virt-customize -a {{ workdir }}/{{ image_name }} \
+          --run-command 'truncate -s 0 /etc/machine-id && rm -f /var/lib/dbus/machine-id'
+
+            
+      - name: Get QCOW2 image info
+        ansible.builtin.shell: "qemu-img info {{ workdir }}/{{ image_name }}"
+        register: image_info
+
+      - name: Show QCOW2 image details
+        ansible.builtin.debug:
+          msg: |
+            === QCOW2 Image Info ===
+            {{ image_info.stdout }}
+
+
+      - name: Convert image to compressed qcow2
+        ansible.builtin.shell: |
+          qemu-img convert -O qcow2 -c {{ workdir }}/{{ image_name }} {{ workdir }}/{{ template_name }}.qcow2
+        args:
+          creates: "{{ workdir }}/{{ template_name }}.qcow2"
+
+
+      - name: Get QCOW2 image info
+        ansible.builtin.shell: "qemu-img info {{ workdir }}/{{ template_name }}.qcow2"
+        register: image_info
+
+      - name: Show QCOW2 image details
+        ansible.builtin.debug:
+          msg: |
+            === QCOW2 Image Info ===
+            {{ image_info.stdout }}
+
+
+- name: Import Debian Cloud image as Proxmox VM template
+  hosts: node0
+  become: true
+
+  vars_files:
+  - ../vars/debian_template.yml
+
+  tasks:
+    
+    - block:
+      - name: Pull file from container to host using pct pull
+        command: pct pull "{{ lxc_id }}" {{ workdir }}/{{ template_name }}.qcow2 /var/lib/vz/template/qemu/{{ template_name }}.qcow2
+        
+    - block:
+      - name: Import QCOW2 as disk to new VM
+        ansible.builtin.shell: >
+          qm create {{ proxmox_template_vm_id }}
+          --name {{ template_name }}
+          --memory 1024
+          --net0 virtio,bridge=vmbr0 &&
+          qm importdisk {{ proxmox_template_vm_id }}
+          /var/lib/vz/template/qemu/{{ template_name }}.qcow2 {{ proxmox_storage }}
+
+      - name: Configure VM for Cloud-Init
+        ansible.builtin.shell: |
+          qm set {{ proxmox_template_vm_id }} \
+          --scsihw virtio-scsi-pci \
+          --scsi0 {{ proxmox_storage }}:vm-{{ proxmox_template_vm_id }}-disk-0 \
+          --ide2 {{ proxmox_storage }}:cloudinit \
+          --boot c --bootdisk scsi0 \
+          --serial0 socket --vga serial0
+
+      - name: Convert VM to template
+        ansible.builtin.shell: "qm template {{ proxmox_template_vm_id }}"
+
+      - name: Stop and destroy LXC build container
+        ansible.builtin.shell: "pct stop {{ lxc_id }} && pct destroy {{ lxc_id }} --purge"
+        ignore_errors: true
+
+      - ansible.builtin.debug:
+          msg: "✅ Debian Cloud-Init template {{ template_name }} (VMID {{ proxmox_template_vm_id }}) created successfully!"

tasks/host_info.yml

@@ -1,4 +1,4 @@
-- hosts: "{{ dest_hosts }}"
+- hosts: '{{ dest_hosts }}'
   gather_facts: yes
   tasks:
 
@@ -46,7 +46,7 @@
     - name: Show Details for Each Interface (Excluding Loopback)
       ansible.builtin.debug:
         var: hostvars['localhost']['ansible_' + item]
-      loop: "{{ ansible_interfaces }}"
+      loop: '{{ ansible_interfaces }}'
       when: hostvars['localhost']['ansible_' + item] is defined and item not in ['lo']
 
   # ----------------------------------------------------------------------

tasks/proxmox.yml

@@ -0,0 +1,32 @@
+- name: Deploy VM templates
+  hosts: proxmox
+
+  tasks:
+    - name: Install proxmoxer from APT
+      ansible.builtin.apt:
+        name: python3-proxmoxer
+        state: present
+        update_cache: yes
+
+    - name: Install lm-sensors from APT
+      ansible.builtin.apt:
+        name: lm-sensors
+        state: present
+
+    - name: Clone PVE-mods repository
+      ansible.builtin.git:
+        repo: "https://github.com/Meliox/PVE-mods.git"
+        dest: "/opt/PVE-mods"
+        version: "main"
+        update: yes
+
+    - name: Install pve-mod-gui-sensors.sh
+      ansible.builtin.copy:
+        src: "/opt/PVE-mods/pve-mod-gui-sensors.sh"
+        dest: "/usr/local/bin/pve-mod-gui-sensors.sh"
+        mode: "0755"
+
+    - name: Run script with predefined input
+      ansible.builtin.shell: |
+        printf "a\nC\nN\n2\n" | /usr/local/bin/pve-mod-gui-sensors.sh
+   

tasks/proxmox_debian_template.yml

@@ -0,0 +1,11 @@
+---
+- name: Build Debian Template
+  hosts: node0
+  become: true
+  gather_facts: false
+
+  tasks:
+
+    - name: Deploy the debian template
+      ansible.builtin.include_role:
+        name: ansible_proxmox_vm

tasks/setupacdc.yml

@@ -1,4 +1,25 @@
 ---
+# - name: Install pexpect on Ansible controller
+#   hosts: localhost
+#   gather_facts: false
+
+#   tasks:
+
+#     - name: Install pexpect via pip
+#       ansible.builtin.pip:
+#         name: pexpect
+#         executable: pip3
+
+#     - name: Install py3-pexpect
+#       ansible.builtin.apk:
+#         name: py3-pexpect
+#         state: present
+
+    # - name: Ensure pexpect is installed via apk
+    #   ansible.builtin.apk:
+    #     name: py3-pexpect
+    #     state: present
+
 - name: Create and provision LXC container on Proxmox
   hosts: node0
   gather_facts: no
@@ -6,27 +27,30 @@
   become_user: root
     
   vars:
-    node_ip: "{{ hostvars['node0']['ansible_host'] }}"      
-    mac_address: "8E:90:31:DE:31:36"
+    node_ip: "{{ hostvars['node0']['ansible_host'] }}"
+    mac_address: '8E:90:31:DE:31:36'
 
-    container_id: 200
-    container_template: "/var/lib/vz/template/cache/debian-13-standard_13.1-1_amd64.tar.zst"
-    container_ostype: debian
-    container_hostname: "{{ addc_hostname }}"
-    container_password: 123456
-    container_storage: local-lvm
-    container_rootfs_size: 8G
-    container_memory: 1024
-    container_swap: 256
-    container_cores: 2
-    container_net: name=eth0,bridge=vmbr0,ip={{ addc_ansible_host }}/24,gw={{ location_gateway }},hwaddr={{ mac_address }}
-    container_features: "keyctl=1,nesting=1,mount=cifs"
-    container_description: default lxc
-    container_onboot: 1
-    container_protection: 0
-    container_unprivileged: 1
-    container_pubkey: "{{ ssh_public_keys[0] }}"
-    container_tags: 
+    lxc_id: 200
+    # lxc_template: '/var/lib/vz/template/cache/ubuntu-25.04-standard_25.04-1.1_amd64.tar.zst'
+    lxc_template: '/var/lib/vz/template/cache/debian-13-standard_13.1-1_amd64.tar.zst'
+    # lxc_template: '/var/lib/vz/template/cache/debian-12-standard_12.12-1_amd64.tar.zst'
+    # lxc_ostype: ubuntu
+    lxc_ostype: debian
+    lxc_hostname: '{{ addc_hostname }}'
+    lxc_password: '{{ addc_admin_password }}'
+    lxc_storage: local-lvm
+    lxc_rootfs_size: 8G
+    lxc_memory: 1024
+    lxc_swap: 256
+    lxc_cores: 2
+    lxc_net: name=eth0,bridge=vmbr0,ip={{ addc_ansible_host }}/24,gw={{ location_gateway }},hwaddr={{ mac_address }}
+    lxc_features: 'keyctl=1,nesting=1,mount=cifs'
+    lxc_description: default lxc
+    lxc_onboot: 1
+    lxc_protection: 0
+    lxc_unprivileged: 0
+    lxc_pubkey: '{{ ssh_public_keys[0] }}'
+    lxc_tags: 
       - ansible_managed
       - test
 
@@ -34,64 +58,72 @@
 
     - name: Combine SSH public keys into one file
       ansible.builtin.copy:
-        dest: "{{ ssh_keys_file }}"
+        dest: '{{ ssh_keys_file }}'
         content: |
           {% for key in ssh_public_keys %}
           {{ key }}
           {% endfor %}
         mode: '0644'
 
-    - name: Create LXC container {{ container_hostname }} with id {{ container_id }} using pct command on shell
-      ansible.builtin.shell: |
-        pct create {{ container_id }} {{ container_template }} \
-          -ostype {{ container_ostype }} \
-          -hostname {{ container_hostname }} \
-          -password {{ container_password }} \
-          -ssh-public-keys {{ ssh_keys_file }} \
-          -cores {{ container_cores }} \
-          -memory {{ container_memory }} \
-          -swap {{ container_swap }} \
-          -net0 {{container_net}} \
-          -storage {{ container_storage }} \
-          -description "{{ container_description }}" \
-          -onboot {{ container_onboot }} \
-          -protection {{ container_protection }} \
-          -unprivileged {{ container_unprivileged }} \
-          -tags "{{ container_tags | join(',') }}" \
-          -features {{ container_features }}
-      args:
-        creates: "/etc/pve/lxc/{{ container_id }}.conf"
-      no_log: true
+    - name: debug
+      # Comment
+      ansible.builtin.debug:
+        msg: 'Hello world! {{ lxc_password }}'
+        verbosity: 0
+    
 
-# -rootfs {{ container_storage }}:{{ container_id }}/vm-{{ container_id }}-disk-0.raw,size=7G \
+    - name: Create LXC container {{ lxc_hostname }} with id {{ lxc_id }} using pct command on shell
+      ansible.builtin.shell: |
+        set -e
+        pct create {{ lxc_id }} {{ lxc_template }} \
+          -ostype {{ lxc_ostype }} \
+          -hostname {{ lxc_hostname }} \
+          -password '{{ lxc_password }}' \
+          -ssh-public-keys '{{ ssh_keys_file }}' \
+          -cores {{ lxc_cores }} \
+          -memory {{ lxc_memory }} \
+          -swap {{ lxc_swap }} \
+          -net0 '{{lxc_net}}' \
+          -storage {{ lxc_storage }} \
+          -description '{{ lxc_description }}' \
+          -onboot {{ lxc_onboot }} \
+          -protection {{ lxc_protection }} \
+          -unprivileged {{ lxc_unprivileged }} \
+          -tags '{{ lxc_tags | join(',') }}' \
+          -features '{{ lxc_features }}'
+      args:
+        creates: '/etc/pve/lxc/{{ lxc_id }}.conf'
+      no_log: false
+# -password {{ lxc_password }} \
+# -rootfs {{ lxc_storage }}:{{ lxc_id }}/vm-{{ lxc_id }}-disk-0.raw,size=7G \
    
 # -timezone: {{ localization_timezone }} \
 
-    - name: Check if LXC container {{ container_hostname }} is running
+    - name: Check if LXC container {{ lxc_hostname }} is running
       ansible.builtin.command:
-        cmd: pct status {{ container_id }}
+        cmd: pct status {{ lxc_id }}
       register: pct_status
       changed_when: false
 
-    - name: Start the LXC container {{ container_hostname }} if stopped
+    - name: Start the LXC container {{ lxc_hostname }} if stopped
       ansible.builtin.command:
-        cmd: pct start {{ container_id }}
+        cmd: pct start {{ lxc_id }}
       when: "'status: stopped' in pct_status.stdout"
       register: start_result
       changed_when: "'status: stopped' in pct_status.stdout"
 
     - name: Wait until container has an IP address
-      ansible.builtin.shell: "pct exec {{ container_id }} -- hostname -I | awk '{print $1}'"
+      ansible.builtin.shell: "pct exec {{ lxc_id }} -- hostname -I | awk '{print $1}'"
       register: lxc_ip
-      until: lxc_ip.stdout != ""
+      until: lxc_ip.stdout != ''
       retries: 10
       delay: 5
       changed_when: false
-      failed_when: lxc_ip.stdout == ""
+      failed_when: lxc_ip.stdout == ''
 
     - name: Wait for SSH to become available
       ansible.builtin.wait_for:
-        host: "{{ lxc_ip.stdout }}"
+        host: '{{ lxc_ip.stdout }}'
         port: 22
         delay: 5
         timeout: 60
@@ -103,18 +135,55 @@
 
 - name: Provision dc1 LXC
   hosts: dc1
-  gather_facts: false
+  gather_facts: true
   become: true
 
+  # vars:
+  #   addc_admin_password: '{{ addc_adminpass }}'
+
   tasks:
 
   # - name: Ensure SSH authorized keys are present
   #   ansible.posix.authorized_key:
   #     user: root
-  #     key: "{{ item }}"
+  #     key: '{{ item }}'
   #     state: present
-  #   loop: "{{ ssh_public_keys }}"
+  #   loop: '{{ ssh_public_keys }}'
 
+  - name: Update apt cache
+    ansible.builtin.apt:
+      update_cache: true
+
+  - name: Install all available updates
+    ansible.builtin.apt:
+      upgrade: dist
+      autoremove: true
+
+  - name: Reboot if a new kernel was installed
+    ansible.builtin.reboot:
+      msg: "Rebooting after full upgrade"
+      connect_timeout: 5
+      reboot_timeout: 600
+    when: ansible_facts.packages is not defined or
+          ansible_facts.packages['linux-image-generic'] is defined
+
+  # - name: Ensure update-manager-core is installed
+  #   ansible.builtin.apt:
+  #     name: update-manager-core
+  #     state: present
+
+  # - name: Perform Ubuntu release upgrade non-interactively
+  #   ansible.builtin.command:
+  #     cmd: do-release-upgrade -f DistUpgradeViewNonInteractive
+  #   register: upgrade_output
+  #   changed_when: "'No new release found' not in upgrade_output.stdout"
+
+  # - name: Reboot if kernel updated
+  #   ansible.builtin.reboot:
+  #     msg: "Rebooting after Ubuntu upgrade"
+  #     connect_timeout: 5
+  #     reboot_timeout: 600
+  #   when: upgrade_output is changed
 
   - name: Install useful packages
     ansible.builtin.package:
@@ -126,18 +195,25 @@
 
   - name: Update all packages, autoclean, and autoremove
     ansible.builtin.apt:
-      name: "*"
+      name: '*'
       state: latest
       autoclean: yes
       autoremove: yes
       purge: true
 
   - name: Set timezone to {{ localization_timezone }}
-    community.general.timezone:
-      name: "{{ localization_timezone }}"
+    # community.general.timezone:
+    timezone:
+      name: '{{ localization_timezone }}'
     notify: Restart sshd
     tags: [timezone]
 
+
+
+  - name: Deploy the Samba AD DC role
+    ansible.builtin.include_role:
+      name: ansible_samba_ad_dc
+      
 # --- Global Handlers ----------------------------------------------
 
   handlers:

tasks/testing.yml

@@ -0,0 +1,124 @@
+---
+- name: Deploy VM templates
+  hosts: node0
+
+  tasks:
+    # - name: Import variables from Ansible vault
+    #   ansible.builtin.include_vars: secrets.yml
+    - name: Install proxmoxer from APT
+      apt:
+        name: python3-proxmoxer
+        state: present
+        update_cache: yes
+
+    - name: "[PREFLIGHT] Check if 'snippets' is already enabled for {{ proxmox_snippets_storage }}"
+      ansible.builtin.command: "grep -E 'dir:\\s*{{ proxmox_snippets_storage }}' -A5 /etc/pve/storage.cfg"
+      register: snippets_check
+      failed_when: false
+      changed_when: false
+      vars: 
+        proxmox_snippets_storage: local
+
+    - name: "[PREFLIGHT] Determine whether 'snippets' is already configured"
+      ansible.builtin.set_fact:
+        snippets_already_present: "{{ 'snippets' in snippets_check.stdout }}"
+
+    - name: "[PREFLIGHT] Ensure 'snippets' is enabled for {{ proxmox_snippets_storage }}"
+      ansible.builtin.replace:
+        path: /etc/pve/storage.cfg
+        regexp: '(dir:\s*{{ proxmox_snippets_storage }}[\s\S]*?content\s+)(.*)(?<!snippets)'
+        replace: '\1\2,snippets'
+      when: not snippets_already_present
+      vars: 
+        proxmox_snippets_storage: local
+
+    - name: "[PREFLIGHT] Ensure snippets storage directory exists"
+      ansible.builtin.file:
+        path: "{{ proxmox_snippets_storage_path }}/snippets"
+        state: directory
+        mode: "0755"
+      vars: 
+        proxmox_snippets_storage_path: /var/lib/vz
+
+
+    - name: Deploy templates with proxmox_template_vm
+      ansible.builtin.include_role:
+        name: joshrnoll.homelab.proxmox_template_vm
+      vars: 
+
+        proxmox_template_vm_supported_distros:
+          - fedora
+          - ubuntu
+          - debian
+
+        proxmox_template_vm_debian_image: debian-13-genericcloud-amd64-20251117-2299.qcow2
+        proxmox_template_vm_debian_image_url: https://cloud.debian.org/images/cloud/trixie/20251117-2299/debian-13-genericcloud-amd64-20251117-2299.qcow2
+
+        proxmox_template_vm_debian_ostype: l26 
+
+        # Required to provide at least one
+        proxmox_template_vm_distros:
+          - debian
+
+        # Required proxmox credentials
+        proxmox_template_vm_proxmox_username: "{{ proxmox_username }}" # From Ansible vault
+        proxmox_template_vm_proxmox_api_token_id: "{{ proxmox_api_token_id }}" # From Ansible vault
+        proxmox_template_vm_proxmox_api_token_secret: "{{ proxmox_api_token_secret }}" # From Ansible vault
+
+        # Optional customizations for debian
+        proxmox_template_vm_debian_name: debian-template
+        proxmox_template_vm_debian_memory: 2048
+        proxmox_template_vm_debian_cores: 2
+        proxmox_template_vm_debian_storage: local-lvm
+        proxmox_template_vm_debian_ciuser: "{{ ciuser }}" # From Ansible vault
+        proxmox_template_vm_debian_cipassword: "{{ cipassword }}" # From Ansible vault
+        proxmox_template_vm_debian_sshkeys: "{{ ssh_public_keys | join('\n') }}" # gets your ssh key from /home/user/.ssh/id_rsa.pub -- customize this to your needs
+        # proxmox_template_vm_debian_vlan: 50
+
+        # Set to true if you have slow storage to avoid file locks
+        proxmox_template_vm_slow_storage: true
+
+    - name: Deploy VMs
+      ansible.builtin.include_role: 
+        name: joshrnoll.homelab.create_proxmox_vms
+      vars:
+        # Proxmox credentials
+        create_proxmox_vms_proxmox_username: "{{ proxmox_username }}"
+        create_proxmox_vms_proxmox_api_token_id: "{{ proxmox_api_token_id }}"
+        create_proxmox_vms_proxmox_api_token_secret: "{{ proxmox_api_token_secret }}"
+
+        # VMs to be created
+        create_proxmox_vms_list:
+          - name: dc1
+            template: 9412
+            vmid: 1000
+            memory: 2048
+            cores: 2
+            node: node0 # The hostname of the node that the VM will be created on
+            ciuser: "{{ ciuser }}"
+            cipassword: "{{ cipassword }}"
+            # sshkeys: "{{ lookup('file', lookup('env','HOME') + '/.ssh/id_rsa.pub') }}"
+            storage: local-lvm
+            disk_size: 8G 
+            # vlan: 50 
+            ip_address: 192.168.2.3/24
+            gateway: 192.168.2.1
+            nameservers:
+              - 192.168.2.100
+              - 8.8.8.8
+
+
+- name: Test common role
+  hosts: dc1
+
+  tasks:
+  - name: Deploy VMs
+    ansible.builtin.include_role: 
+      name: ansible-role-debian_common
+
+    # vars:
+    #       # Proxmox credentials
+    #       ansible_user: "{{ ciuser }}"
+    #       ansible_password: "{{ cipassword }}"
+
+      

tasks/testvault.yml

@@ -0,0 +1,17 @@
+---
+- name: Test secrets.yml
+  hosts: localhost
+
+  vars:
+    admin_user: joseadm
+    admin_password: changeme
+
+  tasks:
+    # - name: Import variables from Ansible vault
+    #   ansible.builtin.include_vars: 
+    #     ../../secrets.yml
+
+    - name: debug secrets.yml"
+      ansible.builtin.debug: 
+        msg: "The value of the secret is {{ test_password }}"
+  

vars/debian_template.yml

@@ -0,0 +1,11 @@
+---
+workdir: "/tmp/debian_template_build"
+debian_image_url: "https://cloud.debian.org/images/cloud/trixie/latest/debian-13-generic-amd64.qcow2"
+image_name: "debian-13-genericcloud-amd64.qcow2"
+template_name: "debian-13-cloudinit-template"
+root_password: "debian"
+proxmox_storage: "local-lvm"
+proxmox_template_vm_id: 9000
+
+lxc_id: 9900
+