Role common: add task sftpd.yml for chrooted SFTP access.

- group 'sftpusers' (GID 200 or next free), sshd drop-in
  /etc/ssh/sshd_config.d/90-sshd-SFTP.conf (Match Group, ChrootDirectory %h,
  ForceCommand internal-sftp), PasswordAuthentication via
  'sftp_password_authentication'
- new sftp users (UID 201 or next free) with root owned chroot home,
  upload dir and root owned authorized_keys (always created)
- existing users (e.g. www-data, suexec users) can be added to the group;
  chroot requirements of their home are checked, not changed
- passwords: update_password defaults to 'always', password of users with
  shell access is never changed
- controlled by 'chrooted_sftpd_present' (default: false), tag 'sftpd'
- add empty sftpd section to all host_vars *-common.yml

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

group_vars/all/main.yml

@@ -2473,6 +2473,99 @@ sshd_pasword_auth_user:
 sshd_pasword_auth_ip:
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+# Set up chrooted SFTP access (group, sshd config, sftp users)?
+#
+chrooted_sftpd_present: false
+
+# Group for chrooted sftp users. GID is 'sftp_group_id_start' if still
+# free, otherwise the next free GID above.
+#
+sftp_group_name: sftpusers
+sftp_group_id_start: 200
+
+# New sftp users get UID 'sftp_user_id_start' or the next free UID above
+# (unless 'user_id' is given explicitly). Existing users keep their UID.
+#
+sftp_user_id_start: 201
+
+# Allow password authentication for members of the sftp group?
+# (overrides the global sshd setting for this group)
+#
+sftp_password_authentication: !!str "no"
+
+# sftp users
+#
+# New users (will be created):
+#
+#   name:            user name                                  (required)
+#   home:            home = chroot directory, owned by root     (required)
+#   ssh_keys:        list of public keys (authorized_keys)      (optional, default: [])
+#   password:        password hash (e.g. 'mkpasswd -m yescrypt') (optional, default: '!' = locked)
+#   update_password: always | on_create                         (optional, default: always)
+#   upload_dir:      writable directory inside chroot           (optional, default: upload)
+#   user_id:         fixed UID                                  (optional)
+#
+#   <home>/.ssh/authorized_keys is always created (owned by root) - it
+#   is empty, if no ssh_keys are given.
+#
+#   Note: with 'update_password: always' (default) the password hash given
+#         here is enforced on every run - without 'password' the account
+#         gets locked ('!'). With 'on_create' the password is only set when
+#         the user is created.
+#
+#   If the user already exists with shell access (shell other than
+#   nologin/false), the play fails for the host - use 'existing_user: true'.
+#
+# Existing users (e.g. www-data or suexec users of vhosts), only added to
+# the sftp group:
+#
+#   name:           user name                                  (required)
+#   existing_user:  true                                       (required)
+#   ssh_keys:       public keys, added to the users            (optional)
+#                   ~/.ssh/authorized_keys
+#   password:       password hash                              (optional, default: unchanged)
+#   update_password: always | on_create                        (optional, default: always)
+#
+#   ~/.ssh and ~/.ssh/authorized_keys are always created (owned by the
+#   user), an existing authorized_keys is never truncated. Without
+#   'password' the password stays untouched.
+#
+#   UID, primary group, home and shell stay untouched, 'home' is ignored.
+#   The home directory (from /etc/passwd) becomes the chroot directory, so
+#   it and all its parents must be owned by root and not writable by
+#   group/others (e.g. /var/www owned by root:root, mode 0755). This is
+#   checked - the play fails for the host otherwise - but never changed.
+#
+#   ATTENTION: A user in the sftp group has NO shell access anymore
+#              (ForceCommand internal-sftp).
+#
+# Note: ssh_keys are optional. Without key and without password (and with
+#       'sftp_password_authentication: no') the user can't log in.
+#
+# Note: The password of a user with shell access (login shell other than
+#       nologin/false) is NEVER changed, regardless of 'password' and
+#       'update_password'.
+#
+# example:
+#
+#   sftp_user:
+#     - name: sftp-test
+#       home: /data/sftp/sftp-test
+#       ssh_keys:
+#         - 'ssh-ed25519 AAAA... user@host'
+#
+#     - name: www-data
+#       existing_user: true
+#       ssh_keys:
+#         - 'ssh-ed25519 AAAA... user@host'
+#
+sftp_user: []
+
+
 # ---
 # vars used by roles/common/tasks/sudoers.yml
 # ---

host_vars/a.mx.oopen.de/a.mx-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/a.ns.oopen.de/a.ns-common.yml

@@ -66,6 +66,11 @@ extra_user:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/ak-plan.oopen.de/ak-plan-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/anita.wf.netz/anita-common.yml

@@ -21,6 +21,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/at-10-neu.ak.netz/at-10-neu-common.yml

@@ -58,6 +58,11 @@ network_interfaces:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/b.mx.oopen.de/b.mx-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/b.ns.oopen.de/b.ns-common.yml

@@ -60,6 +60,11 @@ extra_user:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/backup.oopen.de/backup-common.yml

@@ -49,6 +49,11 @@ root_ssh_keypair:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/backup.warenform.de/backup-common.yml

@@ -59,6 +59,11 @@ root_ssh_keypair:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/c.mx.oopen.de/c.mx-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/cl-01.oopen.de/cl-01-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-02.oopen.de/cl-02-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-dissens.oopen.de/cl-dissens-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-flr.oopen.de/cl-flr-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-fm.oopen.de/cl-fm-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-irights.oopen.de/cl-irights-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-nd-test.oopen.de/cl-nd-test-common.yml

@@ -9,6 +9,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-nd.oopen.de/cl-nd-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-ndm.oopen.de/cl-ndm-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-opp.oopen.de/cl-opp-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cl-test.oopen.de/cl-test-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cloud.akweb.de/cloud-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cp-01.oopen.de/cp-01-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/cp-flr.oopen.de/cp-flr-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/d.mx.oopen.de/d.mx-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/dc-opp.oopen.de/dc-opp-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/devel-db.wf.netz/devel-db-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/devel-php.wf.netz/devel-php-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/devel-repos.wf.netz/devel-repos-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/devel-root.wf.netz/devel-root-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/devel-wiki.wf.netz/devel-wiki-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/dns0.warenform.de/dns0-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/dns1.warenform.de/dns1-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/e.mx.oopen.de/e.mx-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-ah.kanzlei-kiel.netz/file-ah-common.yml

@@ -93,6 +93,11 @@ network_interfaces:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-blkr.blkr.netz/file-blkr-common.yml

@@ -90,6 +90,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-256
   - ssh-rsa
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-dissens.dissens.netz/file-dissens-common.yml

@@ -68,6 +68,11 @@ network_interfaces:
 # vars used by roles/common/tasks/sshd.yml
 # ---
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-ebs.ebs.netz/file-ebs-common.yml

@@ -92,6 +92,11 @@ network_interfaces:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-fhxb.fhxb.netz/file-fhxb-common.yml

@@ -69,6 +69,11 @@ network_interfaces:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-fm.fm.netz/file-fm-common.yml

@@ -68,6 +68,11 @@ network_interfaces:
 # vars used by roles/common/tasks/sshd.yml
 # ---
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-kb.anw-kb.netz/file-kb-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-km-alt.anw-km.netz/file-km-alt-common.yml

@@ -89,6 +89,11 @@ network_interfaces:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/file-km.anw-km.netz/file-km-common.yml

@@ -80,6 +80,11 @@ network_interfaces:
 # vars used by roles/common/tasks/sshd.yml
 # ---
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/formbricks-nd.oopen.de/formbricks-nd-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/g.mx.oopen.de/g.mx-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-al-gw.oopen.de/ga-al-gw-common.yml

@@ -270,6 +270,11 @@ network_interfaces:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-al-kvm2.ga.netz/ga-al-kvm2-common.yml

@@ -94,6 +94,11 @@ sudo_users:
 sshd_permit_root_login: !!str "prohibit-password"
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/sudoers.yml
 # ---

host_vars/ga-al-kvm3.ga.netz/ga-al-kvm3-common.yml

@@ -94,6 +94,11 @@ sudo_users:
 sshd_permit_root_login: !!str "prohibit-password"
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/sudoers.yml
 # ---

host_vars/ga-al-relay.ga.netz/ga-al-relay-common.yml

@@ -74,6 +74,11 @@ sudo_users:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-gh-gw.oopen.de/ga-gh-gw-common.yml

@@ -146,6 +146,11 @@ cron_user_special_time_entries:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-nh-gw.oopen.de/ga-nh-gw-common.yml

@@ -150,6 +150,11 @@ cron_user_special_time_entries:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-st-gw-ersatz.ga.netz/ga-st-gw-ersatz-common.yml

@@ -24,6 +24,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-st-gw.ga.netz/ga-st-gw-common.yml

@@ -320,6 +320,11 @@ network_interfaces:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-st-kvm1.ga.netz/ga-st-kvm1-common.yml

@@ -94,6 +94,11 @@ sudo_users:
 sshd_permit_root_login: !!str "prohibit-password"
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/sudoers.yml
 # ---

host_vars/ga-st-kvm5.ga.netz/ga-st-kvm5-common.yml

@@ -166,6 +166,11 @@ sudo_users:
 sshd_permit_root_login: !!str "prohibit-password"
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/sudoers.yml
 # ---

host_vars/ga-st-lxc1.ga.netz/ga-st-lxc1-common.yml

@@ -121,6 +121,11 @@ network_interfaces:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-st-mail.ga.netz/ga-st-mail-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/ga-st-services.ga.netz/ga-st-services-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/git.oopen.de/git-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/git.warenform.de/git-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-123.oopen.de/gw-123-common.yml

@@ -36,6 +36,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-ah.oopen.de/gw-ah-common.yml

@@ -31,6 +31,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-ak.oopen.de/gw-ak-common.yml

@@ -81,6 +81,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-akb.oopen.de/gw-akb-common.yml

@@ -36,6 +36,11 @@ copy_additional_plain_files_sysctl:
 #  - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-b3.oopen.de/gw-b3-common.yml

@@ -36,6 +36,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-blkr.oopen.de/gw-blkr-common.yml

@@ -146,6 +146,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-campus.oopen.de/gw-campus-common.yml

@@ -183,6 +183,11 @@ cron_user_special_time_entries:
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-ckubu.local.netz/gw-ckubu-common.yml

@@ -27,6 +27,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-256-cert-v01@openssh.com
   - rsa-sha2-512-cert-v01@openssh.com
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-d11.oopen.de/gw-d11-common.yml

@@ -36,6 +36,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-dissens.oopen.de/gw-dissens-common.yml

@@ -77,6 +77,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-ebs.oopen.de/gw-ebs-common.yml

@@ -77,6 +77,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-elster.oopen.de/gw-elster-common.yml

@@ -147,6 +147,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-fhxb.oopen.de/gw-fhxb-common.yml

@@ -85,6 +85,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-flr.oopen.de/gw-flr-common.yml

@@ -145,6 +145,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-fm.oopen.de/gw-fm-common.yml

@@ -98,6 +98,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-irights.oopen.de/gw-irights-common.yml

@@ -142,6 +142,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-kb.oopen.de/gw-kb-common.yml

@@ -133,6 +133,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-km.oopen.de/gw-km-common.yml

@@ -132,6 +132,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-mbr.oopen.de/gw-mbr-common.yml

@@ -98,6 +98,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-opp.oopen.de/gw-opp-common.yml

@@ -81,6 +81,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-replacement.local.netz/gw-replacement-common.yml

@@ -36,6 +36,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/gw-spr.oopen.de/gw-spr-common.yml

@@ -36,6 +36,11 @@ sshd_hostkeyalgorithms:
   - rsa-sha2-512-cert-v01@openssh.com
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/h.mx.oopen.de/h.mx-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/iam-nd.oopen.de/iam-nd-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/initiativenserver.oopen.de/initiativenserver-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/keycloak-nd.oopen.de/keycloak-nd-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/lists.mx.warenform.de/lists.mx-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/lxc-host-kb.anw-kb.netz/lxc-host-kb-common.yml

@@ -28,6 +28,11 @@ sshd_pubkey_authentication: !!str "yes"
 sshd_password_authentication: !!str "yes"
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/mail.cadus.org/mail-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/mail.faire-mobilitaet.de/mail-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/matomo-01.oopen.de/matomo-01-common.yml

@@ -25,6 +25,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/meet.akweb.de/meet-common.yml

@@ -21,6 +21,11 @@
 
 sshd_permit_root_login: !!str "prohibit-password"
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by apt.yml
 # ---

host_vars/meet.oopen.de/meet-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/mm-irights.oopen.de/mm-irights-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/mm-nd-test.oopen.de/mm-nd-test-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/mm-nd.oopen.de/mm-nd-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/mm-rav.oopen.de/mm-rav-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/mm.oopen.de/mm-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---

host_vars/munin.oopen.de/munin-common.yml

@@ -20,6 +20,11 @@
 # ---
 
 
+# ---
+# vars used by roles/common/tasks/sftpd.yml
+# ---
+
+
 # ---
 # vars used by roles/common/tasks/apt.yml
 # ---