diff --git a/deployment/check/data-model-tf-proxmox/nixosTest.nix b/deployment/check/data-model-tf-proxmox/nixosTest.nix
index cb7287e0..7574b4fa 100644
--- a/deployment/check/data-model-tf-proxmox/nixosTest.nix
+++ b/deployment/check/data-model-tf-proxmox/nixosTest.nix
@@ -205,6 +205,7 @@ in
 
     deploy = f"""
       ssh -o BatchMode=yes -o StrictHostKeyChecking=no pve "true"
+      export PROXMOX_VE_INSECURE="true"
       export SSL_CERT_FILE=/tmp/pve-ca-bundle.crt
       export PROXMOX_VE_API_TOKEN="root@pam!mytoken={pm_token}"
       ${lib.getExe deployment.run} | jq -r '.ipv4.value[0]'
diff --git a/deployment/run/tf-proxmox/main.tf b/deployment/run/tf-proxmox/main.tf
index b36cb1dc..11f6e4b6 100644
--- a/deployment/run/tf-proxmox/main.tf
+++ b/deployment/run/tf-proxmox/main.tf
@@ -16,9 +16,6 @@ locals {
 # https://registry.terraform.io/providers/bpg/proxmox/latest/docs
 provider "proxmox" {
   endpoint = "https://${var.host}:8006/"
-  insecure = true
-  # FIXME secure
-  # insecure = false
 
   # used only for files and creating custom disks
   ssh {