Keep track of IPs for PVE hosts

Yea they're all random, I'll deal with that later

ansible/roles/nebula/files/nebula.yml

@@ -32,7 +32,7 @@ tun:
   routes:
   unsafe_routes:
 {% if ansible_fqdn != "ingress" %}
-    - route: 10.23.1.0/24
+    - route: "{{ pve_hosts.internal_cidr }}"
       via: "{{ nebula.clients.ingress.ip }}"
 {% endif %}