diff --git a/host_vars/cl-vbrg.oopen.de.yml b/host_vars/cl-vbrg.oopen.de.yml
new file mode 100644
index 0000000..a7c1f06
--- /dev/null
+++ b/host_vars/cl-vbrg.oopen.de.yml
@@ -0,0 +1,73 @@
+---
+
+# ---
+# vars used by roles/ansible_dependencies
+# ---
+
+
+# ---
+# vars used by roles/ansible_user
+# ---
+
+
+# ---
+# vars used by roles/common/tasks/basic.yml
+# ---
+
+
+# ---
+# vars used by roles/common/tasks/sshd.yml
+# ---
+
+sshd_permit_root_login: !!str "prohibit-password"
+
+# ---
+# vars used by apt.yml
+# ---
+
+
+# ---
+# vars used by roles/common/tasks/users.yml
+# ---
+
+
+# ---
+# vars used by roles/common/tasks/users-systemfiles.yml
+# ---
+
+
+# ---
+# vars used by roles/common/tasks/webadmin-user.yml
+# ---
+
+
+# ---
+# vars used by roles/common/tasks/sudoers.yml
+# ---
+#
+# see: roles/common/tasks/vars
+
+sudoers_file_user_privileges:
+  - name: back
+    entry: 'ALL=(www-data) NOPASSWD: /usr/local/php/bin/php'
+
+
+# ---
+# vars used by roles/common/tasks/caching-nameserver.yml
+# ---
+
+
+# ---
+# vars used by roles/common/tasks/git.yml
+# ---
+#
+# see: roles/common/tasks/vars
+
+
+# ==============================
+
+
+# ---
+# vars used by scripts/reset_root_passwd.yml
+# ---
+
diff --git a/host_vars/o34.oopen.de.yml b/host_vars/o34.oopen.de.yml
index 7527d08..fc72593 100644
--- a/host_vars/o34.oopen.de.yml
+++ b/host_vars/o34.oopen.de.yml
@@ -211,6 +211,10 @@ sudo_users:
 #
 # see: roles/common/tasks/vars
 
+sudoers_file_user_privileges:
+  - name: back
+    entry: 'ALL=(www-data) NOPASSWD: /usr/local/php/bin/php'
+
 
 # ---
 # vars used by roles/common/tasks/caching-nameserver.yml
diff --git a/hosts b/hosts
index bc8bd2c..aa70a83 100644
--- a/hosts
+++ b/hosts
@@ -133,10 +133,8 @@ o18.oopen.de
 
 o20.oopen.de
 
-o31.oopen.de
-mail.cadus.org
-web.cadus.org
-wiki.cadus.org
+# o21.oopen.de
+o21-oolm-db.oopen.de
 
 o22.oopen.de
 oolm-db.oopen.de
@@ -181,6 +179,12 @@ o30.oopen.de
 meet.akweb.de
 cloud.akweb.de
 
+# o31.oopen.de - Cadus e.V.
+o31.oopen.de
+mail.cadus.org
+web.cadus.org
+wiki.cadus.org
+
 # etventure
 o32.oopen.de
 
@@ -287,10 +291,8 @@ o18.oopen.de
 # - o20.oopen.de (srv-cityslang.cityslang.com)
 o20.oopen.de
 
-o31.oopen.de
-mail.cadus.org
-web.cadus.org
-wiki.cadus.org
+# - o21.oopen.de
+o21-oolm-db.oopen.de
 
 # - o22.oopen.de
 o22.oopen.de
@@ -339,6 +341,12 @@ o30.oopen.de
 meet.akweb.de
 cloud.akweb.de
 
+# o31.oopen.de - Cadus e.V.
+o31.oopen.de
+mail.cadus.org
+web.cadus.org
+wiki.cadus.org
+
 # etventure
 o32.oopen.de
 
@@ -860,6 +868,9 @@ test.mariadb.oopen.de
 # o20.oopen.de (srv-cityslang.cityslang.com)
 o20.oopen.de
 
+# o21.oopen.de
+o21-oolm-db.oopen.de
+
 # o22.oopen.de
 oolm-db-dev.oopen.de
 oolm-db.oopen.de
@@ -889,7 +900,7 @@ backup.oopen.de
 # o30.oopen.de - AK server Jitsi Meet/Nextcloud
 cloud.akweb.de
 
-# o31.oopen.de
+# o31.oopen.de - Cadus e.V.
 web.cadus.org
 wiki.cadus.org
 mail.cadus.org
@@ -1178,6 +1189,7 @@ o13.oopen.de
 o17.oopen.de
 o18.oopen.de
 #o20.oopen.de
+o21-oolm-db.oopen.de
 o22.oopen.de
 o23.oopen.de
 o24.oopen.de
@@ -1254,6 +1266,9 @@ mail.cadus.org
 web.cadus.org
 wiki.cadus.org
 
+# o21.oopen.de
+o21-oolm-db.oopen.de
+
 # - o22.oopen.de
 oolm-db.oopen.de
 oolm-db-dev.oopen.de
@@ -1421,6 +1436,9 @@ mail.cadus.org
 web.cadus.org
 wiki.cadus.org
 
+# o21.oopen.de
+o21-oolm-db.oopen.de
+
 # - o22.oopen.de
 o22.oopen.de
 oolm-db.oopen.de