Role ipt-server: initiativenserver: clamp IPv6 HTTPS MSS to 1360 again.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

host_vars/initiativenserver.oopen.de/initiativenserver-ipt-server.yml

@@ -21,6 +21,10 @@ munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
 fw_http_server_ips: $ext_1_ip
 fw_http_server_ips_v6: $ext_ips
 
+# --- IPv6: clamp MSS of incoming HTTPS SYN packets (as before the migration)
+fw_throttle_tcp6_mss_for_https: true
+fw_tcp6_mss_for_https_val: "1360"
+
 # --- Mail
 fw_mail_client_ips: $ext_1_ip
 fw_mail_client_ips_v6: $ext_ips

hosts

@@ -7,6 +7,7 @@ formbricks-nd.oopen.de
 #schleuder3.so36.net ansible_user=ckubu
 #site36.net ansible_user=ckubu
 #web.so36.net ansible_user=ckubu
+
 [so36_server]
 backup.so36.net ansible_user=ckubu
 comm.so36.net ansible_user=ckubu
@@ -27,7 +28,6 @@ web.so36.net ansible_user=ckubu
 [no_ipt_firewall]
 
 lxc-host-kb.anw-kb.netz
-o13-git.oopen.de
 o13-staging-board.oopen.de
 o25.oopen.de
 o41.oopen.de