---
# Proxmox-specific variables

# Allow root SSH login with keys (required for Proxmox cluster inter-node communication)
common_ssh_permit_root_login: "prohibit-password"

# Disable firewall on Proxmox (uses its own iptables rules)
common_firewall_enabled: false

# Or if you want UFW, allow these ports:
# common_firewall_allowed_ports:
#   - "22/tcp"
#   - "8006/tcp"        # Web UI
#   - "5900:5999/tcp"   # VNC
#   - "3128/tcp"        # SPICE proxy
#   - "5404:5405/udp"   # Corosync cluster
#   - "111/tcp"         # rpcbind