- name: Retrieve service list
  set_fact:
    services: '{{ query("netbox.netbox.nb_lookup", "clusters", raw_data=true, api_filter="name="+cluster) | map(attribute="custom_fields.services") | flatten }}'

- name: Set up firewall
  template:
    dest: /etc/pve/firewall/cluster.fw
    src: cluster.fw.j2
    mode: 0640
    owner: root
    group: www-data