diff --git a/roles/proxmox/tasks/55_create_vm.yaml b/roles/proxmox/tasks/55_create_vm.yaml
index 4d42fc3..95d46e5 100644
--- a/roles/proxmox/tasks/55_create_vm.yaml
+++ b/roles/proxmox/tasks/55_create_vm.yaml
@@ -18,7 +18,7 @@
     tags: "{{ proxmox_tags }}"
     description: "Created via Ansible with cloud-init"
     boot: "order=scsi0"
-    cpu: "x86-64-v3"
+    cpu: "{{ proxmox_node_cpu[vm.node] | default('x86-64-v2-AES') }}"
     ciuser: "{{ vm.ciuser }}"
     cipassword: "{{ vm_secrets[proxmox_secrets_prefix + '_' + vm.name.replace('-', '_')] }}"
     ipconfig:
diff --git a/vars/group_vars/proxmox/vars.yaml b/vars/group_vars/proxmox/vars.yaml
index 378585d..3ebc3a5 100644
--- a/vars/group_vars/proxmox/vars.yaml
+++ b/vars/group_vars/proxmox/vars.yaml
@@ -2,3 +2,12 @@ proxmox_api_host: 192.168.20.12
 proxmox_api_user: root
 proxmox_api_token_id: terraform
 proxmox_api_token_secret: "{{ vault_pve.api.token_secret }}"
+
+# CPU type per Proxmox node — x86-64-v3 requires AVX2 (Ryzen 5700U, N100, i5-7200U)
+# aya01 (Celeron N5105) tops out at SSE4.2, must stay at v2
+proxmox_node_cpu:
+  aya01: "x86-64-v2-AES"
+  inko01: "x86-64-v3"
+  lulu: "x86-64-v3"
+  mii01: "x86-64-v3"
+  naruto01: "x86-64-v3"