diff --git a/platform/proxmox/ansible/roles/pve-cluster/tasks/main.yml b/platform/proxmox/ansible/roles/pve-cluster/tasks/main.yml
index 0846702..cdee96f 100644
--- a/platform/proxmox/ansible/roles/pve-cluster/tasks/main.yml
+++ b/platform/proxmox/ansible/roles/pve-cluster/tasks/main.yml
@@ -151,8 +151,7 @@
   ansible.builtin.template:
     src: cluster.fw.j2
     dest: /etc/pve/firewall/cluster.fw
-    mode: "0640"
-    unsafe_writes: true
+    unsafe_writes: true   # pmxcfs: kein chmod, kein atomares Umbenennen
   register: cluster_fw
 
 - name: Regelwerk übersetzen (Syntaxprüfung, ändert nichts)