diff --git a/.github/workflows/infra.yaml b/.github/workflows/infra.yaml
index c9bbde6..1a54013 100644
--- a/.github/workflows/infra.yaml
+++ b/.github/workflows/infra.yaml
@@ -36,7 +36,7 @@ jobs:
       - name: Check playbooks
         run: |
           for file in $(find . -wholename "*/infra/*playbook.yaml" -type f); do
-            ansible-playbook --inventory ./inventory --check "$file"
+            ansible-playbook --inventory ./inventory --syntax-check "$file"
           done
 
       - name: Get changed playbooks
diff --git a/infra/joplin/0000_proxmox_playbook.yaml b/infra/joplin/0000_proxmox_playbook.yaml
index 407a213..626bcee 100644
--- a/infra/joplin/0000_proxmox_playbook.yaml
+++ b/infra/joplin/0000_proxmox_playbook.yaml
@@ -1,11 +1,12 @@
 - name: Provision joplin Proxmox VM
   hosts: localhost
-  gather_facts: false
+  # gather_facts: false
   vars:
-    api_user: "{{ lookup('env', 'PROXMOX_USER') }}"
-    api_host: "{{ lookup('env', 'PROXMOX_HOST' ) }}"
-    api_token_id: "{{ lookup('env', 'PROXMOX_TOKEN_ID') }}"
-    api_token_secret: "{{ lookup('env', 'PROXMOX_TOKEN_SECRET') }}"
+    api_user: "{{ lookup('ansible.builtin.env', 'PROXMOX_USER') }}"
+    api_host: "{{ lookup('ansible.builtin.env', 'PROXMOX_HOST' ) }}"
+    api_token_id: "{{ lookup('ansible.builtin.env', 'PROXMOX_TOKEN_ID') }}"
+    api_token_secret: "{{ lookup('ansible.builtin.env', 'PROXMOX_TOKEN_SECRET') }}"
+    ssh_public: "{{ lookup('ansible.builtin.env', 'SSH_PUBLIC') }}"
     vmname: joplin
     node: pve
   module_defaults:
@@ -31,7 +32,7 @@
   tasks:
     - name: Create VM
       community.general.proxmox_kvm:
-        clone: pve-debian-12
+        clone: "{{ node }}-debian-12"
         storage: nvme
     - name: Wait for VM to exist
       community.general.proxmox_kvm:
@@ -58,7 +59,7 @@
       community.general.proxmox_kvm:
         update: true
         ciuser: debian
-        sshkeys: "{{ lookup('env', 'SSH_PUBLIC') }}"
+        sshkeys: "{{ ssh_public }}"
         ipconfig:
           ipconfig0: ip=dhcp,ip6=auto
         agent: enabled=1