Avoid exposing passwords in the process list, use a password file.

roles/lmn_vm/tasks/main.yml

@@ -163,12 +163,21 @@
     - uploadseed
 
 - name: Deploy vm configuration file vm.conf
-  copy:
+  ansible.builtin.copy:
     src: vm.conf
     dest: /etc/lmn/vm.conf
     owner: root
     group: root
 
+- name: Deploy aria2 RPC password file
+  ansible.builtin.copy:
+    dest: /etc/lmn/uploadseed.conf
+    owner: root
+    group: lmnsynci
+    mode: '0640'
+    content: |
+      "{{ uploadseed_pwd }}"
+
 - name: Prepare directory for qemu bridge config
   ansible.builtin.file:
     path: /etc/qemu/