diff --git a/README.md b/README.md
index 76625bd..ac568b9 100644
--- a/README.md
+++ b/README.md
@@ -94,4 +94,4 @@ GITEA_TOKEN=fdsfsd
 
 
 
-docker run -d  -p 127.0.0.1:80:80  -e REF_DOMAIN=bastion.jingoh.private  -e DATA_ROOT=/DATA  -v /data:/DATA -v /var/run/docker.sock:/var/run/docker.sock  --name casaos casaos
\ No newline at end of file
+# docker run -d  -p 127.0.0.1:8000:8080  -e DATA_ROOT=/DATA  -v /DATA:/DATA -v /var/run/docker.sock:/var/run/docker.sock  --name casaos casaos
\ No newline at end of file
diff --git a/host_vars/bastion.yml b/host_vars/bastion.yml
new file mode 100644
index 0000000..664a36a
--- /dev/null
+++ b/host_vars/bastion.yml
@@ -0,0 +1,25 @@
+firewall_allowed_tcp_ports:
+  - "22"
+  - "443"
+  - "9100"
+  # jelly
+  - "8443"
+  # qbit
+  - "9444"
+  # acunetix
+  - "3443"
+
+
+
+#services:  beszel-agent:    image: "henrygd/beszel-agent"    container_name: "beszel-agent"    restart: unless-stopped    network_mode: host    volumes:      - /var/run/docker.sock:/var/run/docker.sock:ro    environment:      PORT: 45876      KEY: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOrCJDOWRgW7ZeQHjdoag7Fcf+q3086/RV6VMs091bFc"      # FILESYSTEM: /dev/sda1 # set to the correct filesystem for disk I/O stats
+# services:
+#   beszel-agent:
+#     image: 'henrygd/beszel-agent'
+#     container_name: 'beszel-agent'
+#     restart: unless-stopped
+#     network_mode: host
+#     volumes:
+#       - /var/run/docker.sock:/var/run/docker.sock:ro
+#     environment:
+#       PORT: 45876
+#       KEY: 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAII1NtEui+P0Pk2+/n1MFrhm5jzssJq7QNmBCl7Zdc8yi'
\ No newline at end of file
diff --git a/update.yml b/update.yml
index d1fdd6b..ecf436d 100644
--- a/update.yml
+++ b/update.yml
@@ -15,6 +15,8 @@
               
   tasks:
 
+# stephane ALL=(ALL) NOPASSWD: ALL or need ansible_sudo_pass
+
     - apt:
         update_cache: yes
       become: true