Role ipt-server: migrate first group of 12 hosts.

server23/26/27.warenform.de, git, o12, o22, o27, o31, o42, cl-exil,
cl-opp, web-09.oopen.de.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

host_vars/backup.oopen.de/backup-ipt-server.yml

@@ -23,6 +23,10 @@ fw_allow_ext_service_v4: "138.201.17.150:1036:tcp o32.oopen.de:2222:tcp"
 # --- Access control IPv6
 fw_allow_ext_service_v6: "2a01:4f8:171:2895::2,1036,tcp o32.oopen.de,2222,tcp"
 
+# --- SSH
+fw_ssh_ports: "$standard_ssh_port 2222"
+fw_ssh_ports_v6: "$standard_ssh_port"
+
 # --- HTTP
 fw_http_server_ips: $ext_ips
 

host_vars/cl-exil.oopen.de/cl-exil-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/cl-opp.oopen.de/cl-opp-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/git.oopen.de/git-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o12.oopen.de/o12-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o22.oopen.de/o22-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o27.oopen.de/o27-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o31.oopen.de/o31-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/o42.oopen.de/o42-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/server23.warenform.de/server23-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/server26.warenform.de/server26-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/server27.warenform.de/server27-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces:

host_vars/web-09.oopen.de/web-09-ipt-server.yml

@@ -3,7 +3,7 @@
 # Generated by extract-fw-host-vars.py - review before committing!
 # Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
 
-fw_manage_config: false
+fw_manage_config: true
 
 # --- Network
 fw_ext_interfaces: