I have not found a supported method but would be interested in what you find. If the environment does not have access to the internet, you will need to host the repos internally so the engine and hypervisors can install packages through regular operations like adding a new host. Unless you modify the ansible scripts. I prefer running nginx local to the environment but NFS and a file:// call in the repo would work the same depending on compliance needs. I like to deploy the engine in a Podman container with macvlan for a separated network with its own IP and FQDN. HA can then be configured in a couple of ways to mimic the internal HA VM Engine and a singular IP/DNS use case. Also helps with deployment time since the engine only needs to be built once, deployed, and configured for that new cluster. This still requires internal repos for the hypervisors unless you containerize the vdsm and other supporting services