Inventory cleanup; add ipt-server host_vars for all ipt hosts.

- hosts: remove unreachable/decommissioned hosts (file-ah-neu, file-ah-alt,
  file-km-neu, ga-al-gw-neu, gw-opp-neu, zapata-neu, zapata-alt, bbb-server,
  ki-fm, server28, ...) and duplicate aliases (etherpad = b.ns,
  cl-irights-neu = cl-irights, oolm-db = o21, devel-ruby = devel-todo).
- host_vars: add <short>-ipt-server.yml (fw_manage_config: false) for all
  hosts running the ipt-server firewall, generated by extract-fw-host-vars.py.
- host_vars: move/remove obsolete host directories, replace alias
  directories by symlinks (cl-lubax -> o32, cl-vbrg -> o34, oolm-db -> o21).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
2026-11-03 23:08:58 +01:00
co-authored by Claude Opus 5.5
parent 8484fd1508
commit 3a73ed9583
126 changed files with 3350 additions and 2970 deletions
+7 -126
View File
@@ -36,7 +36,7 @@ ak-plan.oopen.de
discourse.oopen.de
test-nd.oopen.de
formbricks-nd.oopen.de
#cl-lubax.oopen.de
#o32.oopen.de
[dns_sinma]
@@ -65,26 +65,19 @@ gw-irights.oopen.de
gw-km.oopen.de
gw-mbr.oopen.de
gw-opp.oopen.de
gw-opp-neu.opp.netz
gw-spr.oopen.de
gw-kb.oopen.de
bbb-server.b3-bornim.netz
file-ah.kanzlei-kiel.netz
file-ah-neu.kanzlei-kiel.netz
file-ah-alt.kanzlei-kiel.netz
file-ebs.ebs.netz
file-fm.fm.netz
file-fhxb.fhxb.netz
file-km.anw-km.netz
file-km-alt.anw-km.netz
file-km-neu.anw-km.netz
file-kb.anw-kb.netz
file-blkr.blkr.netz
file-dissens.dissens.netz
zapata.opp.netz
zapata-neu.opp.netz
zapata-alt.opp.netz
gw-replacement.local.netz
gw-replacement2.local.netz
@@ -95,9 +88,7 @@ at-10-neu.ak.netz
ga-st-gw-ersatz.ga.netz
ga-st-gw.ga.netz
ga-st-gw-neu.ga.netz
ga-al-gw.oopen.de
ga-al-gw-neu.ga.netz
ga-nh-gw.oopen.de
ga-gh-gw.oopen.de
gw-campus.oopen.de
@@ -140,9 +131,6 @@ web2.warenform.de
# server26.warenform.de
git.warenform.de
# Jitsi Meet - Faire Integration
server28.warenform.de
o12.oopen.de
initiativenserver.oopen.de
@@ -184,7 +172,6 @@ o20.oopen.de
o21.oopen.de
o22.oopen.de
oolm-db.oopen.de
oolm-shop.oopen.de
oolm-shop-dev.oopen.de
oolm-web.oopen.de
@@ -196,11 +183,9 @@ cp-01.oopen.de
meet.oopen.de
mm.oopen.de
discourse.oopen.de
mm-migration.oopen.de
o24.oopen.de
cl-irights.oopen.de
cl-irights-neu.oopen.de
mm-irights.oopen.de
# IL - PAD
@@ -216,8 +201,6 @@ o27.oopen.de
cl-fm.oopen.de
mail.faire-mobilitaet.de
# Hetzner cloud (CPX22)
ki-fm.oopen.de
# - o28 NDM - neue deutsche Medienmacher*innen
o28.oopen.de
@@ -240,7 +223,7 @@ mail.cadus.org
web.cadus.org
# o32.oopen.de / cl-lubax.oopen.de
cl-lubax.oopen.de
o32.oopen.de
# BigBlueButton - O.OPEN
@@ -251,7 +234,6 @@ o35.oopen.de
b.ns.oopen.de
cl-02.oopen.de
e.mx.oopen.de
etherpad.oopen.de
web-02.oopen.de
d.mx.oopen.de
a.mx.oopen.de
@@ -361,9 +343,6 @@ server27.warenform.de
verdi-django.warenform.de
verdi-es.warenform.de
# Jitsi Meet - Faire Integration
server28.warenform.de
# VServer Sinma
dns1.warenform.de
@@ -417,7 +396,6 @@ o21.oopen.de
# - o22.oopen.de
o22.oopen.de
oolm-db.oopen.de
oolm-shop.oopen.de
oolm-shop-dev.oopen.de
oolm-web.oopen.de
@@ -430,12 +408,10 @@ cp-01.oopen.de
meet.oopen.de
mm.oopen.de
discourse.oopen.de
mm-migration.oopen.de
# - o24.oopen.de
o24.oopen.de
cl-irights.oopen.de
cl-irights-neu.oopen.de
# IL - PAD
o25.oopen.de
@@ -450,9 +426,6 @@ o27.oopen.de
cl-fm.oopen.de
mail.faire-mobilitaet.de
# Hetzner cloud (CPX22)
ki-fm.oopen.de
# - o28 NDM - neue deutsche Medienmacher*innen
o28.oopen.de
cl-ndm.oopen.de
@@ -474,7 +447,7 @@ mail.cadus.org
web.cadus.org
# o32.oopen.de / cl-lubax.oopen.de
cl-lubax.oopen.de
o32.oopen.de
# BigBlueButton - O.OPEN
@@ -486,7 +459,6 @@ o35.oopen.de
b.ns.oopen.de
cl-02.oopen.de
e.mx.oopen.de
etherpad.oopen.de
web-02.oopen.de
d.mx.oopen.de
a.mx.oopen.de
@@ -578,7 +550,6 @@ gw-dissens.oopen.de
# B3 Bornim
gw-b3.oopen.de
bbb-server.b3-bornim.netz
# - FHXB Museum Friedrichshain Kreuzberg
gw-fhxb.oopen.de
@@ -594,7 +565,6 @@ gw-irights.oopen.de
gw-km.oopen.de
file-km.anw-km.netz
file-km-alt.anw-km.netz
file-km-neu.anw-km.netz
file-kb.anw-kb.netz
# - Kanzlei BLKR
@@ -619,8 +589,6 @@ gw-elster.oopen.de
# - Kanzlei Kiel
gw-ah.oopen.de
file-ah.kanzlei-kiel.netz
file-ah-neu.kanzlei-kiel.netz
file-ah-alt.kanzlei-kiel.netz
# Kanzlei Kreuzbergstraße
gw-kb.oopen.de
@@ -630,10 +598,7 @@ gw-mbr.oopen.de
# OPP
gw-opp.oopen.de
gw-opp-neu.opp.netz
zapata.opp.netz
zapata-neu.opp.netz
zapata-alt.opp.netz
# Sprachenatelier
gw-spr.oopen.de
@@ -644,9 +609,7 @@ gw-d11.oopen.de
# - GA - Gemeinschaft Altensclirf
ga-st-gw-ersatz.ga.netz
ga-st-gw.ga.netz
ga-st-gw-neu.ga.netz
ga-al-gw.oopen.de
ga-al-gw-neu.ga.netz
ga-nh-gw.oopen.de
ga-gh-gw.oopen.de
gw-campus.oopen.de
@@ -672,7 +635,6 @@ devel-repos.wf.netz
devel-php.wf.netz
devel-todo.wf.netz
devel-wiki.wf.netz
devel-ruby.wf.netz
[ftp_server]
@@ -771,7 +733,6 @@ cl-test.oopen.de
# o24.oopen.de
cl-irights.oopen.de
cl-irights-neu.oopen.de
# Backup Faire Mobilitaet
o26.oopen.de
@@ -780,9 +741,6 @@ o26.oopen.de
cl-fm.oopen.de
mail.faire-mobilitaet.de
# Hetzner cloud (CPX22)
ki-fm.oopen.de
# - o28 neue deutsche Medienmacher*innen - NDM Host System
cl-ndm.oopen.de
psono-ndm.oopen.de
@@ -794,7 +752,7 @@ cl-dissens.oopen.de
cloud.akweb.de
# o32.oopen.de / cl-lubax.oopen.de
cl-lubax.oopen.de
o32.oopen.de
# Nextcloud / DokuWiki VBER
o34.oopen.de
@@ -890,7 +848,6 @@ verdi-es.warenform.de
devel-php.wf.netz
devel-todo.wf.netz
devel-wiki.wf.netz
devel-ruby.wf.netz
# ---
# O.OPEN office network
@@ -929,14 +886,10 @@ devel-php.wf.netz
devel-todo.wf.netz
devel-wiki.wf.netz
devel-repos.wf.netz
devel-ruby.wf.netz
[nginx_webserver]
# Jitsi Meet - Faire Integration
server28.warenform.de
# o12.oopen.de
stolpersteine.oopen.de
@@ -951,7 +904,6 @@ o13-cryptpad.oopen.de
cp-01.oopen.de
meet.oopen.de
mm.oopen.de
mm-migration.oopen.de
# o24.oopen.de
mm-irights.oopen.de
@@ -965,14 +917,10 @@ psono-ndm.oopen.de
# o29.oopen.de . Dissens
cl-dissens.oopen.de
# Hetzner cloud (CPX22) - Faire Mobilitaet
ki-fm.oopen.de
# Nextcloud / DokuWiki VBER
o34.oopen.de
# o35.oopen.de
etherpad.oopen.de
web-02.oopen.de
# o36 - b.mx, web-01, web-03,--
@@ -1098,7 +1046,6 @@ o13-mail.oopen.de
# o23.oopen.de
mm.oopen.de
mm-migration.oopen.de
# o24.oopen.de
mm-irights.oopen.de
@@ -1196,17 +1143,14 @@ o20.oopen.de
o21.oopen.de
# o22.oopen.de
oolm-db.oopen.de
oolm-web.oopen.de
# o23.oopen.de
cl-01.oopen.de
mm.oopen.de
mm-migration.oopen.de
# o24.oopen.de
cl-irights.oopen.de
cl-irights-neu.oopen.de
mm-irights.oopen.de
# Hetzner Cloud CX31 - AK
@@ -1217,9 +1161,6 @@ o26.oopen.de
# o27.oopen.de
cl-fm.oopen.de
# Hetzner cloud (CPX22)
ki-fm.oopen.de
# - o28 neue deutsche Medienmacher*innen - NDM Host System
cl-ndm.oopen.de
psono-ndm.oopen.de
@@ -1235,14 +1176,13 @@ web.cadus.org
mail.cadus.org
# o32.oopen.de / cl-lubax.oopen.de
cl-lubax.oopen.de
o32.oopen.de
# Nextcloud / DokuWiki VBER
o34.oopen.de
# o35.oopen.de
cl-02.oopen.de
etherpad.oopen.de
web-02.oopen.de
d.mx.oopen.de
@@ -1333,7 +1273,6 @@ cl-test.oopen.de
# o24.oopen.de
cl-irights.oopen.de
cl-irights-neu.oopen.de
# o26.oopen.de
o26.oopen.de
@@ -1341,9 +1280,6 @@ o26.oopen.de
# o27.oopen.de
cl-fm.oopen.de
# Hetzner cloud (CPX22)
ki-fm.oopen.de
# - o28 neue deutsche Medienmacher*innen - NDM Host System
cl-ndm.oopen.de
psono-ndm.oopen.de
@@ -1355,7 +1291,7 @@ cl-dissens.oopen.de
cloud.akweb.de
# o32.oopen.de / cl-lubax.oopen.de
cl-lubax.oopen.de
o32.oopen.de
# Nextcloud / DokuWiki VBER
o34.oopen.de
@@ -1505,22 +1441,16 @@ anita.wf.netz
# Büro Netzwerke
# ---
at-10-neu.ak.netz
bbb-server.b3-bornim.netz
file-ah.kanzlei-kiel.netz
file-ah-neu.kanzlei-kiel.netz
file-ah-alt.kanzlei-kiel.netz
file-ebs.ebs.netz
file-fm.fm.netz
file-fhxb.fhxb.netz
file-km.anw-km.netz
file-km-alt.anw-km.netz
file-km-neu.anw-km.netz
file-kb.anw-kb.netz
file-blkr.blkr.netz
file-dissens.dissens.netz
zapata.opp.netz
zapata-neu.opp.netz
zapata-alt.opp.netz
@@ -1529,8 +1459,6 @@ zapata-alt.opp.netz
file-blkr.blkr.netz
file-dissens.dissens.netz
file-ah.kanzlei-kiel.netz
file-ah-neu.kanzlei-kiel.netz
file-ah-alt.kanzlei-kiel.netz
file-ebs.ebs.netz
file-fm.fm.netz
file-fhxb.fhxb.netz
@@ -1566,9 +1494,6 @@ file-blkr.blkr.netz
# o23.oopen.de
meet.oopen.de
# Jitsi Meet - Faire Integration
server28.warenform.de
# o30.oopen.de - AK Server Nextcloud/Jitsi Meet
meet.akweb.de
@@ -1648,18 +1573,12 @@ lxc-host-kb.anw-kb.netz
# O.OPEN office network
# ---
bbb-server.b3-bornim.netz
file-ah.kanzlei-kiel.netz
file-ah-neu.kanzlei-kiel.netz
file-ah-alt.kanzlei-kiel.netz
file-km.anw-km.netz
file-km-alt.anw-km.netz
file-km-neu.anw-km.netz
file-kb.anw-kb.netz
file-blkr.blkr.netz
zapata.opp.netz
zapata-neu.opp.netz
zapata-alt.opp.netz
# - GA - Gemeinschaft Altensclirf
ga-st-lxc1.ga.netz
@@ -1725,7 +1644,6 @@ web.cadus.org
o21.oopen.de
# - o22.oopen.de
oolm-db.oopen.de
oolm-shop.oopen.de
oolm-shop-dev.oopen.de
oolm-web.oopen.de
@@ -1737,20 +1655,15 @@ cp-01.oopen.de
meet.oopen.de
mm.oopen.de
discourse.oopen.de
mm-migration.oopen.de
# - o24.oopen.de
cl-irights.oopen.de
cl-irights-neu.oopen.de
mm-irights.oopen.de
# - o27.oopen.de
cl-fm.oopen.de
mail.faire-mobilitaet.de
# Hetzner cloud (CPX22)
ki-fm.oopen.de
# Hetzner Cloud CX31 - AK
# o28.oopen.de NDM - neue deutsche Medienmacher*innen
@@ -1773,7 +1686,6 @@ o34.oopen.de
# o35.oopen.de
cl-02.oopen.de
e.mx.oopen.de
etherpad.oopen.de
web-02.oopen.de
b.ns.oopen.de
d.mx.oopen.de
@@ -1829,22 +1741,16 @@ cl-nd-test.oopen.de
# ---
at-10-neu.ak.netz
bbb-server.b3-bornim.netz
file-ah.kanzlei-kiel.netz
file-ah-neu.kanzlei-kiel.netz
file-ah-alt.kanzlei-kiel.netz
file-ebs.ebs.netz
file-fm.fm.netz
file-fhxb.fhxb.netz
file-km.anw-km.netz
file-km-alt.anw-km.netz
file-km-neu.anw-km.netz
file-kb.anw-kb.netz
file-blkr.blkr.netz
file-dissens.dissens.netz
zapata.opp.netz
zapata-neu.opp.netz
zapata-alt.opp.netz
# - GA - Gemeinschaft Altensclirf
@@ -1887,9 +1793,6 @@ git.warenform.de
verdi-django.warenform.de
verdi-es.warenform.de
# Jitsi Meet - Faire Integration
server28.warenform.de
# - Vserver von Sinma
dns1.warenform.de
@@ -1905,7 +1808,6 @@ devel-php.wf.netz
devel-repos.wf.netz
devel-todo.wf.netz
devel-wiki.wf.netz
devel-ruby.wf.netz
# All oopen server (except office networks)
@@ -1953,7 +1855,6 @@ o21.oopen.de
# - o22.oopen.de
o22.oopen.de
oolm-db.oopen.de
oolm-shop.oopen.de
oolm-shop-dev.oopen.de
oolm-web.oopen.de
@@ -1966,12 +1867,10 @@ cp-01.oopen.de
meet.oopen.de
mm.oopen.de
discourse.oopen.de
mm-migration.oopen.de
# - o24.oopen.de
o24.oopen.de
cl-irights.oopen.de
cl-irights-neu.oopen.de
mm-irights.oopen.de
# IL - PAD
@@ -1987,9 +1886,6 @@ o27.oopen.de
cl-fm.oopen.de
mail.faire-mobilitaet.de
# Hetzner cloud (CPX22)
ki-fm.oopen.de
# o28.oopen.de NDM - neue deutsche Medienmacher*innen
o28.oopen.de
cl-ndm.oopen.de
@@ -2011,7 +1907,7 @@ mail.cadus.org
web.cadus.org
# o32.oopen.de / cl-lubax.oopen.de
cl-lubax.oopen.de
o32.oopen.de
# BigBlueButton - O.OPEN
@@ -2022,7 +1918,6 @@ o34.oopen.de
o35.oopen.de
cl-02.oopen.de
e.mx.oopen.de
etherpad.oopen.de
web-02.oopen.de
b.ns.oopen.de
d.mx.oopen.de
@@ -2094,22 +1989,16 @@ lxc-host-kb.anw-kb.netz
[oopen_office_server]
at-10-neu.ak.netz
bbb-server.b3-bornim.netz
file-ah.kanzlei-kiel.netz
file-ah-neu.kanzlei-kiel.netz
file-ah-alt.kanzlei-kiel.netz
file-ebs.ebs.netz
file-fm.fm.netz
file-fhxb.fhxb.netz
file-km.anw-km.netz
file-km-alt.anw-km.netz
file-km-neu.anw-km.netz
file-kb.anw-kb.netz
file-blkr.blkr.netz
file-dissens.dissens.netz
zapata.opp.netz
zapata-neu.opp.netz
zapata-alt.opp.netz
[gateway_server_ro]
@@ -2142,7 +2031,6 @@ gw-irights.oopen.de
gw-km.oopen.de
gw-mbr.oopen.de
gw-opp.oopen.de
gw-opp-neu.opp.netz
gw-spr.oopen.de
gw-kb.oopen.de
@@ -2152,9 +2040,7 @@ k1371.dyndns.org
ga-st-gw-ersatz.ga.netz
ga-st-gw.ga.netz
ga-st-gw-neu.ga.netz
ga-al-gw.oopen.de
ga-al-gw-neu.ga.netz
ga-nh-gw.oopen.de
ga-gh-gw.oopen.de
gw-campus.oopen.de
@@ -2212,9 +2098,6 @@ server27.warenform.de
verdi-django.warenform.de
verdi-es.warenform.de
# Jitsi Meet - Faire Integration
server28.warenform.de
# - Vserver von Sinma
dns1.warenform.de
@@ -2229,13 +2112,11 @@ devel-php.wf.netz
devel-repos.wf.netz
devel-todo.wf.netz
devel-wiki.wf.netz
devel-ruby.wf.netz
[oopen_office_ga]
# - GA - Gemeinschaft Altensclirf
ga-al-gw.oopen.de
ga-al-gw-neu.ga.netz
ga-al-kvm2.ga.netz
ga-al-kvm3.ga.netz
ga-al-relay.ga.netz