Patching

Ansible works when you run it. Ad-hoc runs drift. Schedule the patch playbook weekly and forget about it.

The automated Proxmox install gets you a configured host from a USB stick. But what happens in month two? Package updates, SSH hardening drift, backup schedule changes. Manual changes on a single host become tribal knowledge. Add a second node and you’re copy-pasting configs. Ansible picks up where first-boot leaves off. “The spice must flow.” - Dune. So must your config. Automate it.