Capture current Ansible control plane state

Commit the accumulated infrastructure work that was living only in the
working tree: monitoring stack, emergency access/bot, gyro allocator,
grimmory, adguard, backup audit and the OpenCode agent definitions.

Also ignore Python bytecode, local archives and Nix/direnv artifacts.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GTocXkGUUazHdKKd3r9k71

ansible/roles/pve_lxc/defaults/main.yml

@@ -1,7 +1,7 @@
 ---
 pve_lxc_vmid: 132
 pve_lxc_node: mini-pc
-pve_lxc_hostname: wg-mini
+pve_lxc_hostname: ovpn-mini
 pve_lxc_ip: 192.168.1.23/24
 pve_lxc_gateway: 192.168.1.1
 pve_lxc_bridge: vmbr0
@@ -13,8 +13,10 @@ pve_lxc_swap: 128
 pve_lxc_onboot: true
 pve_lxc_startup: order=30
 pve_lxc_unprivileged: true
+pve_lxc_update: true
 pve_lxc_features:
   - nesting=1
 pve_lxc_nameserver: 1.1.1.1
 pve_lxc_pubkey_file: ~/.ssh/id_ed25519_homelab.pub
 pve_lxc_cmode: shell
+pve_lxc_api_port: "{{ lookup('env', 'PROXMOX_PORT') | default('8006', true) | int }}"

ansible/roles/pve_lxc/tasks/main.yml

@@ -11,6 +11,7 @@
 - name: Create or update LXC container
   community.proxmox.proxmox:
     api_host: "{{ lookup('env', 'PROXMOX_HOST') }}"
+    api_port: "{{ pve_lxc_api_port }}"
     api_user: "{{ lookup('env', 'PROXMOX_USER') }}"
     api_token_id: "{{ lookup('env', 'PROXMOX_TOKEN_ID') }}"
     api_token_secret: "{{ lookup('env', 'PROXMOX_TOKEN_SECRET') }}"
@@ -32,15 +33,18 @@
     unprivileged: "{{ pve_lxc_unprivileged }}"
     onboot: "{{ pve_lxc_onboot }}"
     startup: "{{ pve_lxc_startup }}"
-    update: true
+    update: "{{ pve_lxc_update }}"
     state: present
+  no_log: true
 
 - name: Start LXC container
   community.proxmox.proxmox:
     api_host: "{{ lookup('env', 'PROXMOX_HOST') }}"
+    api_port: "{{ pve_lxc_api_port }}"
     api_user: "{{ lookup('env', 'PROXMOX_USER') }}"
     api_token_id: "{{ lookup('env', 'PROXMOX_TOKEN_ID') }}"
     api_token_secret: "{{ lookup('env', 'PROXMOX_TOKEN_SECRET') }}"
     validate_certs: "{{ lookup('env', 'PROXMOX_VALIDATE_CERTS') | default('false', true) | bool }}"
     vmid: "{{ pve_lxc_vmid }}"
     state: started
+  no_log: true