2 Commits

Include renames

Author	SHA1	Message	Date
chrisandClaude Opus 5.5	67c1086e2c	Role common: add task sftpd.yml for chrooted SFTP access. ... - group 'sftpusers' (GID 200 or next free), sshd drop-in /etc/ssh/sshd_config.d/90-sshd-SFTP.conf (Match Group, ChrootDirectory %h, ForceCommand internal-sftp), PasswordAuthentication via 'sftp_password_authentication' - new sftp users (UID 201 or next free) with root owned chroot home, upload dir and root owned authorized_keys (always created) - existing users (e.g. www-data, suexec users) can be added to the group; chroot requirements of their home are checked, not changed - passwords: update_password defaults to 'always', password of users with shell access is never changed - controlled by 'chrooted_sftpd_present' (default: false), tag 'sftpd' - add empty sftpd section to all host_vars *-common.yml Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-14 10:42:42 +01:00
chrisandClaude Opus 5.5	f14b8817c0	Inventory/host_vars cleanup. ... - hosts: remove gw-replacement2/3.local.netz and k1371.dyndns.org (duplicate of gw-ak.oopen.de). - host_vars: move obsolete host directories to host_vars/DELETED/ (devel-cloud, file-blkr-alt, file-ipa, ga-campus-gw-temp, ga-st-mm, gitea.so36.net, nc-gw, moodle, nscache, server16, server20, web-test, gw-replacement2/3/4). - host_vars: fix file names (ga-al-gw-common.yml, gw-replacement.local.netz/gw-replacement-common.yml) and the header of mm-nd-test-ipt-server.yml. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-03 23:43:34 +01:00