Keep track of IPs for PVE hosts

Yea they're all random, I'll deal with that later

ansible/roles/nebula/files/nebula.yml

@@ -32,7 +32,7 @@ tun:
   routes:
   unsafe_routes:
 {% if ansible_fqdn != "ingress" %}
-    - route: 10.23.1.0/24
+    - route: "{{ pve_hosts.internal_cidr }}"
       via: "{{ nebula.clients.ingress.ip }}"
 {% endif %}
 

ansible/roles/nebula/tasks/main.yml

@@ -59,7 +59,7 @@
     table: nat
     chain: POSTROUTING
     out_interface: ens18
-    source: "{{ nebula.subnet }}"
+    source: "{{ nebula.cidr }}"
     jump: MASQUERADE
   notify: persist iptables
   become: true