diff --git a/CLAUDE.md b/CLAUDE.md
index 6fd121f..f12f7fe 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -13,16 +13,29 @@ terraform apply
 ## Commandes Ansible
 
 Toujours `--ask-vault-pass`, jamais `--vault-password-file`.
+Toujours lancer depuis `~/homelab/ansible/` (ansible.cfg y est).
 
 ```bash
+cd ~/homelab/ansible
+
 # Déployer tout
-ansible-playbook -i ansible/inventory/hosts.yml ansible/site.yml --ask-vault-pass
+ansible-playbook -i inventory/hosts.yml site.yml --ask-vault-pass
 
 # Un seul playbook
-ansible-playbook -i ansible/inventory/hosts.yml ansible/playbooks/forgejo.yml --ask-vault-pass
+ansible-playbook -i inventory/hosts.yml playbooks/forgejo.yml --ask-vault-pass
 
 # Éditer le vault
-ansible-vault edit ansible/inventory/group_vars/all/vault.yml --ask-vault-pass
+ansible-vault edit inventory/group_vars/all/vault.yml --ask-vault-pass
+```
+
+## Déploiement d'une nouvelle VM
+
+Ordre obligatoire :
+```bash
+cd ~/homelab/ansible
+ansible-playbook -i inventory/hosts.yml playbooks/base.yml --limit <vm> --ask-vault-pass
+ansible-playbook -i inventory/hosts.yml playbooks/docker.yml --limit <vm> --ask-vault-pass
+ansible-playbook -i inventory/hosts.yml playbooks/<service>.yml --ask-vault-pass
 ```
 
 ## SSH agent (obligatoire avant Ansible)