Role ipt-server: migrate second group of 15 hosts.

cloud.akweb.de, cp-01, cp-flr, dns0.warenform.de (add missing IPv4
blocklist), iam-nd, matomo-01, mm-nd-test, munin, nd-live.warenform.de,
o18, o19, o24, o29, o30, o32.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

host_vars/dns0.warenform.de/dns0-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:
@@ -23,3 +23,6 @@ fw_ssh_server_ips: $ext_1_ip
 # --- DNS
 fw_dns_server_ips: $ext_1_ip
 
+
+# --- Block
+fw_blocked_ips_v4: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14