diff --git a/deployment/run/tf-proxmox/main.tf b/deployment/run/tf-proxmox/main.tf
index e17fe058..809a80c9 100644
--- a/deployment/run/tf-proxmox/main.tf
+++ b/deployment/run/tf-proxmox/main.tf
@@ -17,6 +17,8 @@ locals {
 provider "proxmox" {
   endpoint = "https://${var.host}:8006/"
   insecure = true
+  # FIXME secure
+  # insecure = false
 
   # used only for files and creating custom disks
   ssh {
@@ -85,6 +87,8 @@ resource "proxmox_virtual_environment_file" "upload" {
     # path = "/tmp/proxmox-image/${local.dump_name}"
     path = var.image
     file_name = local.dump_name
+    # FIXME compute and pass hash (so identical builds don't trigger drift)
+    # checksum = "sha256"
   }
 }