ssh-certs hosts.

playbooks/ssh-certs/deploy-host-certs.yml

@@ -62,6 +62,20 @@
         marker: "# {mark} ANSIBLE MANAGED HOST CERTIFICATE BLOCK #"
       notify: Restart SSH
 
+    - name: Configure SSH HostKeys for Proxmox compatibility
+      blockinfile:
+        path: /etc/ssh/sshd_config  # Или укажите путь к дроп-ину в sshd_config.d/, если используете их
+        block: | 
+          # Coexistence with Proxmox internal clustering (Plain Keys fallback)
+          HostKey /etc/ssh/ssh_host_rsa_key 
+        marker: "# {mark} ANSIBLE MANAGED HOST CERTIFICATE BLOCK #"
+        create: true
+        mode: '0600'
+        validate: /usr/sbin/sshd -t -f %s
+      when: "'proxmoxes' in group_names"
+      notify: Restart sshd
+
+
     - name: Очистка временных файлов на Ansible-машине
       delegate_to: localhost
       become: no