Role ipt-server: install firewall on o13-web (was missing by mistake).

Remove o13-web from no_ipt_firewall and add host_vars modelled on
o13-pad/o13-cryptpad (SSH, HTTP/HTTPS, outgoing mail, munin, blocked
networks).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

host_vars/o13-web.oopen.de/o13-web-ipt-server.yml

@@ -0,0 +1,29 @@
+---
+# ipt-firewall configuration for o13-web.oopen.de
+# Created by hand (no firewall before), modelled on o13-pad / o13-cryptpad.
+# Place in: host_vars/<hostname>/<short-hostname>-ipt-server.yml
+
+fw_manage_config: true
+
+# --- Network
+fw_ext_interfaces:
+  - "eth0"
+fw_ext_interfaces_v6:
+  - "eth1"
+fw_ext_ips_v4:
+  - "83.223.90.233"
+fw_ext_ips_v6:
+  - "2a01:31:0:2::ad52:a233"
+
+# --- Munin
+munin_remote_ipv4: 37.27.121.227
+munin_remote_ipv6: "2a01:4f9:3070:2bda::227"
+
+# --- HTTP
+fw_http_server_ips: $ext_1_ip
+
+# --- Mail
+fw_mail_client_ips: $ext_1_ip
+
+# --- Block
+fw_blocked_ips_v4: 222.184.0.0/13 61.160.0.0/16 116.8.0.0/14