Role ipt-server: migrate second group of 15 hosts.

cloud.akweb.de, cp-01, cp-flr, dns0.warenform.de (add missing IPv4
blocklist), iam-nd, matomo-01, mm-nd-test, munin, nd-live.warenform.de,
o18, o19, o24, o29, o30, o32.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

host_vars/cloud.akweb.de/cloud-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/cp-01.oopen.de/cp-01-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/cp-flr.oopen.de/cp-flr-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/dns0.warenform.de/dns0-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:
@@ -23,3 +23,6 @@ fw_ssh_server_ips: $ext_1_ip
 # --- DNS
 fw_dns_server_ips: $ext_1_ip
 
+
+# --- Block
+fw_blocked_ips_v4: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14

host_vars/iam-nd.oopen.de/iam-nd-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/matomo-01.oopen.de/matomo-01-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/mm-nd-test.oopen.de/mm-nd-test-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/munin.oopen.de/munin-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/nd-live.warenform.de/nd-live-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o18.oopen.de/o18-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o19.oopen.de/o19-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o24.oopen.de/o24-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o29.oopen.de/o29-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o30.oopen.de/o30-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o32.oopen.de/o32-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces: