fix: specify ansible.builtin.template for service file and configuration deployments

delete: remove obsolete postfix configuration files for rate limiting and user info

.vscode/settings.json

@@ -14,5 +14,8 @@
   "ansible.ansible.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible",
   "ansible.python.interpreterPath": "${workspaceFolder}/.venv/bin/python3",
   "ansible.validation.lint.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible-lint",
-  "ansible.ansibleNavigator.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible-navigator"
+  "ansible.ansibleNavigator.path": "/home/chris/devel/git/git.oopen.de/ansible/oopen-server/.venv/bin/ansible-navigator",
+  "yaml.customTags": [
+    "!vault scalar"
+  ]
 }

ga-eh-gw.oopen.de.yml

@@ -416,4 +416,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

group_vars/all/main.yml

@@ -125,7 +125,6 @@ copy_plain_files_journald:
     dest_path: /etc/systemd/journald.conf.d/50-MaxFileSec.conf
 
 
-
 # copy_plain_files_sysctl: []
 copy_plain_files_sysctl:
 
@@ -1918,11 +1917,12 @@ apt_extra_pkgs: []
 apt_install: {}
 apt_install_state: latest
 
-apt_remove:
+apt_remove: []
-  - apt-transport-tor
+# apt_remove:
-  - tor
+#   - apt-transport-tor
-  - tor-geoipdb
+#   - tor
-  - torsocks
+#   - tor-geoipdb
+#   - torsocks
 
 apt_remove_purge: false
 
@@ -2380,9 +2380,6 @@ extra_system_user: []
 
 
 entries_authorized_key: []
-#entries_authorized_key:
-#  - user: root
-#  - key: 'ssh-rsa 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 root@b.ns'
 
 create_sftp_group: false
 
@@ -2601,7 +2598,7 @@ bind9_notify_source: {}
 bind9_gateway_allow_query:
   - local-net
 
-#bind9_gateway_allow_query_cache: {}
+# ind9_gateway_allow_query_cache: {}
 bind9_gateway_allow_query_cache:
   - local-net
 
@@ -2628,6 +2625,8 @@ ntp_server: {}
 # Firewall repository
 # ---
 
+git_default_branch: main
+
 git_firewall_repository: {}
 
 # ---
@@ -2990,6 +2989,14 @@ copy_plain_files_postfwd:
     src_path: mailserver/etc/postfix/postfwd.bl-user
     dest_path: /etc/postfix/postfwd.bl-user
 
+  - name: postfwd.high_rate_ip
+    src_path: mailserver/etc/postfix/postfwd.high_rate_ip
+    dest_path: /etc/postfix/postfwd.high_rate_ip
+
+  - name: postfwd.high_rate_hostname
+    src_path: mailserver/etc/postfix/postfwd.high_rate_hostname
+    dest_path: /etc/postfix/postfwd.high_rate_hostname
+
   - name: postfwd.bl-recipient-exeeds-msg-size-20mb
     src_path: mailserver/etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
     dest_path: /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
@@ -3105,7 +3112,7 @@ website_name_postfixadmin:
 # --\n
 # O.OPEN            |   Phone:  +49 30 / 290 484 91\n
 # Erkelenzdamm 21   |   Fax:    +49 30 / 290 484 99\n
-#D-10999 Berlin    |   E-MAIL: oo@oopen.de\n
+# -10999 Berlin    |   E-MAIL: oo@oopen.de\n
 # "
 email_welcome_message:
 
@@ -3288,8 +3295,6 @@ redhat_services_active_and_started:
   - tor
 
 
-
-
 # ==============================
 
 

host_vars/a.mx.oopen.de/a.mx-common.yml

@@ -107,14 +107,14 @@ insert_root_ssh_keypair: true
 
 root_ssh_keypair:
   - name: id-rsa-dehydrated
-    priv_key_src: a.mx/root/.ssh/a.mx-id_rsa-dehydrated
+    priv_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-dehydrated
     priv_key_dest: /root/.ssh/id_rsa-dehydrated
-    pub_key_src: a.mx/root/.ssh/a.mx-id_rsa-dehydrated.pub
+    pub_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-dehydrated.pub
     pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
   - name: id-rsa-opendkim
-    priv_key_src: a.mx/root/.ssh/a.mx-id_rsa-opendkim
+    priv_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-opendkim
     priv_key_dest: /root/.ssh/id_rsa-opendkim
-    pub_key_src: a.mx/root/.ssh/a.mx-id_rsa-opendkim.pub
+    pub_key_src: a.mx.oopen.de/root/.ssh/a.mx-id_rsa-opendkim.pub
     pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
 
 
@@ -151,53 +151,6 @@ root_ssh_keypair:
 # vars used by roles/common/tasks/copy_files.yml
 # ---
 
-copy_plain_files:
-
-  # /root/bin/monitoring
-  #
-  - name: monitoring_check_cert_for_dovecot.conf
-    src_path: a.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
-    dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
-
-  # /root/bin/postfix
-  #
-  - name: postfix_create_opendkim_key.conf
-    src_path: a.mx/root/bin/postfix/conf/create_opendkim_key.conf
-    dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
-
-  - name: postfix_postfix_add_mailboxes.conf
-    src_path: a.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
-    dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
-
-  - name: postfix_sent_userinfo_postfix.conf
-    src_path: a.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
-    dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
-
-  - name: postfix_whitelist_mb_sigs.conf
-    src_path: a.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
-    dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
-
-
-copy_plain_files_postfwd_host_specific:
-
-  # Postfix Firewall postfwd
-  #
-  - name: postfwd.wl-user
-    src_path: a.mx/etc/postfix/postfwd.wl-user
-    dest_path: /etc/postfix/postfwd.wl-user
-
-  - name: postfwd.bl-recipient-exeeds-msg-size-20mb
-    src_path: a.mx/etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
-    dest_path:  /etc/postfix/postfwd.bl-recipient-exeeds-msg-size-20mb
-
-
-#copy_template_files: []
-#
-#  - name: mailsystem_install_amavis.conf
-#    src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
-#    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
-
-
 
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -231,30 +184,31 @@ si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07e
 #
 website_name_postfixadmin: adm.oopen.de
 
-email_welcome_message: "\n
+email_welcome_message: |
-Hallo,\n
 
-Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
+  Hallo,
 
-O.OPEN\n
+  Ihre/Deine neue E-Mail Adresse ist eingerichtet.
 
---\n
+  O.OPEN
-O.OPEN            |   Phone:  +49 30 / 290 484 91\n
+
-Erkelenzdamm 21   |   Fax:    +49 30 / 290 484 99\n
+  --
-D-10999 Berlin    |   E-MAIL: oo@oopen.de\n
+  O.OPEN            |   Phone:  +49 30 / 290 484 91
-"
+  Erkelenzdamm 21   |   Fax:    +49 30 / 290 484 99
+  D-10999 Berlin    |   E-MAIL: oo@oopen.de
 
 # install_update_dovecot.conf
 #
 dovecot_from_address: "o.open <oo@oopen.de>"
 dovecot_reply_to: "oo@oopen.de"
 webmailer_address: "https://webmail.oopen.de"
-salutation: "O.OPEN\n
+salutation: |
+  O.OPEN
 
---\n
+  --
-O.OPEN           |   Phone:  +49 30 / 290 484 91\n
+  O.OPEN           |   Phone:  +49 30 / 290 484 91
-Erkelenzdamm 21  |   Fax:    +49 30 / 290 484 99\n
+  Erkelenzdamm 21  |   Fax:    +49 30 / 290 484 99
-D-10999 Berlin   |   http://oopen.de\n"
+  D-10999 Berlin   |   http://oopen.de
 
 # install_upgrade_roundcube-webmail.conf
 #

host_vars/a.mx.oopen.de/a.mx-ipt-server.yml

@@ -42,4 +42,4 @@ fw_jitsi_dovecot_auth: true
 fw_rsync_out_ips: $ext_1_ip
 
 # --- Protection / limits
-fw_per_IP_connection_limit: 250
+fw_per_IP_connection_limit: 250 # noqa: var-naming[pattern]

host_vars/a.ns.oopen.de/a.ns-common.yml

@@ -1,4 +1,5 @@
 ---
+# yamllint disable rule:line-length
 
 # ---
 # vars used by roles/ansible_dependencies
@@ -244,13 +245,9 @@ symlink_files:
 # ---
 
 
-
-
-
 # ==============================
 
 
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/ak-plan.oopen.de/ak-plan-common.yml

@@ -139,4 +139,3 @@ resolved_fallback_nameserver:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/anita.wf.netz/anita-common.yml

@@ -1,4 +1,5 @@
 ---
+# yamllint disable rule:line-length
 
 # ---
 # vars used by roles/ansible_dependencies
@@ -290,4 +291,3 @@ samba_shares:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/at-10-neu.ak.netz/at-10-neu-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -145,7 +145,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---

host_vars/b.mx.oopen.de/b.mx-common.yml

@@ -105,14 +105,14 @@ insert_root_ssh_keypair: true
 
 root_ssh_keypair:
   - name: id-rsa-dehydrated
-    priv_key_src: b.mx/root/.ssh/b.mx-id_rsa-dehydrated
+    priv_key_src: b.mx.oopen.de/root/.ssh/b.mx-id_rsa-dehydrated
     priv_key_dest: /root/.ssh/id_rsa-dehydrated
-    pub_key_src: b.mx/root/.ssh/b.mx-id_rsa-dehydrated.pub
+    pub_key_src: b.mx.oopen.de/root/.ssh/b.mx-id_rsa-dehydrated.pub
     pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
   - name: id-rsa-opendkim
-    priv_key_src: b.mx/root/.ssh/b.mx-id_rsa-opendkim
+    priv_key_src: b.mx.oopen.de/root/.ssh/b.mx-id_rsa-opendkim
     priv_key_dest: /root/.ssh/id_rsa-opendkim
-    pub_key_src: b.mx/root/.ssh/b.mx-id_rsa-opendkim.pub
+    pub_key_src: b.mx.oopen.de/root/.ssh/b.mx-id_rsa-opendkim.pub
     pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
 
 
@@ -149,38 +149,6 @@ root_ssh_keypair:
 # vars used by roles/common/tasks/copy_files.yml
 # ---
 
-copy_plain_files:
-
-  # /root/bin/postfix
-  #
-  - name: postfix_create_opendkim_key.conf
-    src_path: b.mx/root/bin/postfix/conf/create_opendkim_key.conf
-    dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
-
-  - name: postfix_whitelist_mb_sigs.conf
-    src_path: b.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
-    dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
-
-
-copy_plain_files_postfix_host_specific:
-
-  - name: relay_domains
-    src_path: b.mx/etc/postfix/relay_domains
-    dest_path: /etc/postfix/relay_domains
-
-
-copy_plain_files_postfwd_host_specific:
-
-  # Postfix Firewall postfwd
-  #
-  - name: postfwd.wl-nets
-    src_path: b.mx/etc/postfix/postfwd.wl-nets
-    dest_path: /etc/postfix/postfwd.wl-nets
-
-  - name: postfwd.wl-sender
-    src_path: b.mx/etc/postfix/postfwd.wl-sender
-    dest_path: /etc/postfix/postfwd.wl-sender
-
 
 copy_template_files: []
 #
@@ -189,7 +157,6 @@ copy_template_files: []
 #    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
 
 
-
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
 # ---

host_vars/b.ns.oopen.de/b.ns-common.yml

@@ -1,4 +1,5 @@
 ---
+# yamllint disable rule:line-length
 
 # ---
 # vars used by roles/ansible_dependencies
@@ -240,4 +241,3 @@ symlink_files:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/backup.oopen.de/backup-common.yml

@@ -410,4 +410,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/backup.warenform.de/backup-common.yml

@@ -188,8 +188,6 @@ cron_user_entries:
 insert_ssh_keypair_backup_server: false
 
 
-
-
 default_user:
 
   - name: chris
@@ -308,4 +306,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/bbb-server.b3-bornim.netz/bbb-server-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -156,7 +156,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---

host_vars/c.mx.oopen.de/c.mx-common.yml

@@ -107,19 +107,19 @@ insert_root_ssh_keypair: true
 
 root_ssh_keypair:
   - name: id-rsa-dehydrated
-    priv_key_src: c.mx/root/.ssh/c.mx-id_rsa-dehydrated
+    priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-dehydrated
     priv_key_dest: /root/.ssh/id_rsa-dehydrated
-    pub_key_src: c.mx/root/.ssh/c.mx-id_rsa-dehydrated.pub
+    pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-dehydrated.pub
     pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
   - name: id-rsa-opendkim
-    priv_key_src: c.mx/root/.ssh/c.mx-id_rsa-opendkim
+    priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-opendkim
     priv_key_dest: /root/.ssh/id_rsa-opendkim
-    pub_key_src: c.mx/root/.ssh/c.mx-id_rsa-opendkim.pub
+    pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa-opendkim.pub
     pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
   - name: id-rsa
-    priv_key_src: c.mx/root/.ssh/c.mx-id_rsa
+    priv_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa
     priv_key_dest: /root/.ssh/id_rsa
-    pub_key_src: c.mx/root/.ssh/c.mx-id_rsa.pub
+    pub_key_src: c.mx.oopen.de/root/.ssh/c.mx-id_rsa.pub
     pub_key_dest: /root/.ssh/id_rsa.pub
 
 
@@ -156,49 +156,6 @@ root_ssh_keypair:
 # vars used by roles/common/tasks/copy_files.yml
 # ---
 
-copy_plain_files:
-
-  # /root/bin/monitoring
-  #
-  - name: monitoring_check_cert_for_dovecot.conf
-    src_path: c.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
-    dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
-
-  # /root/bin/postfix
-  #
-  - name: postfix_create_opendkim_key.conf
-    src_path: c.mx/root/bin/postfix/conf/create_opendkim_key.conf
-    dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
-
-  - name: postfix_postfix_add_mailboxes.conf
-    src_path: c.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
-    dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
-
-  - name: postfix_sent_userinfo_postfix.conf
-    src_path: c.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
-    dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
-
-  - name: postfix_whitelist_mb_sigs.conf
-    src_path: c.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
-    dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
-
-
-copy_plain_files_postfwd_host_specific: []
-
-  # Postfix Firewall postfwd
-  #
-  #- name: postfwd.wl-user
-  #  src_path: c.mx/etc/postfix/postfwd.wl-user
-  #  dest_path: /etc/postfix/postfwd.wl-user
-
-
-#copy_template_files: []
-#
-#  - name: mailsystem_install_amavis.conf
-#    src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
-#    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
-
-
 
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -230,30 +187,30 @@ si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07e
 #
 website_name_postfixadmin: adm.initiativenserver.de
 
-email_welcome_message: "\n
+email_welcome_message: |
-Hallo,\n
+  Hallo,
 
-Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
+  Ihre/Deine neue E-Mail Adresse ist eingerichtet.
 
   Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit
 
---\n
+  --
-Initiativenserver  |   phone:  0331 505824-28\n
+  Initiativenserver  |   phone:  0331 505824-28
-Mittelstraße 38/39 |   fax:    0331 505824-29\n
+  Mittelstraße 38/39 |   fax:    0331 505824-29
-14467 Potsdam      |   email:  kontakt@initiativenserver.de\n
+  14467 Potsdam      |   email:  kontakt@initiativenserver.de
-"
 
 # install_update_dovecot.conf
 #
 dovecot_from_address: "Admin Initiativenserver <admin@initiativenserver.de>"
 dovecot_reply_to: "admin@initiativenserver.de"
 webmailer_address: "https://webmail.initiativenserver.de"
-salutation: "Aktionsbündnis gegen Gewalt, Rechtsextremismus und FremdenfeindlichkeitN\n
+salutation: |
+  Aktionsbündnis gegen Gewalt, Rechtsextremismus und Fremdenfeindlichkeit
 
---\n
+  --
-Initiativenserver  |   phone:  0331 505824-28\n
+  Initiativenserver  |   phone:  0331 505824-28
-Mittelstraße 38/39 |   fax:    0331 505824-29\n
+  Mittelstraße 38/39 |   fax:    0331 505824-29
-14467 Potsdam      |   email:  kontakt@initiativenserver.de\n"
+  14467 Potsdam      |   email:  kontakt@initiativenserver.de
 
 # install_upgrade_roundcube-webmail.conf
 #
@@ -295,4 +252,3 @@ template_files_mailsystem_script:
   - name: mailsystem_install_upgrade_roundcube-webmail.conf
     src_path: usr/local/src/mailsystem/conf/install_upgrade_roundcube-webmail.conf.j2
     dest_path: /usr/local/src/mailsystem/conf/install_upgrade_roundcube-webmail.conf
-

host_vars/cl-01.oopen.de/cl-01-common.yml

@@ -163,4 +163,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-02.oopen.de/cl-02-common.yml

@@ -150,4 +150,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-dissens.oopen.de/cl-dissens-common.yml

@@ -148,4 +148,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-flr.oopen.de/cl-flr-common.yml

@@ -148,4 +148,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-fm.oopen.de/cl-fm-common.yml

@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-irights.oopen.de/cl-irights-common.yml

@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-lubax.oopen.de/cl-lubax-common.yml

@@ -149,4 +149,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-nd-test.oopen.de/cl-nd-test-ipt-server.yml

@@ -22,3 +22,7 @@ fw_http_server_ips: $ext_1_ip
 
 # --- Mail
 fw_mail_client_ips: $ext_1_ip
+
+# - Docker-Netzwerk nicht firewallen
+#
+fw_unprotected_ifs: br-euroffice

host_vars/cl-nd.oopen.de/cl-nd-common.yml

@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-ndm.oopen.de/cl-ndm-common.yml

@@ -232,4 +232,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-opp.oopen.de/cl-opp-common.yml

@@ -143,4 +143,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-test.oopen.de/cl-test-common.yml

@@ -140,4 +140,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cl-vbrg.oopen.de/cl-vbrg-common.yml

@@ -70,4 +70,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cloud-giz.warenform.de/cloud-giz-common.yml

@@ -70,4 +70,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cloud.akweb.de/cloud-common.yml

@@ -144,4 +144,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cp-01.oopen.de/cp-01-common.yml

@@ -158,4 +158,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/cp-flr.oopen.de/cp-flr-common.yml

@@ -156,4 +156,3 @@ sudoers_file_user_privileges:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/d.mx.oopen.de/d.mx-common.yml

@@ -107,14 +107,14 @@ insert_root_ssh_keypair: true
 
 root_ssh_keypair:
   - name: id-rsa-dehydrated
-    priv_key_src: d.mx/root/.ssh/d.mx-id_rsa-dehydrated
+    priv_key_src: d.mx.oopen.de/root/.ssh/d.mx-id_rsa-dehydrated
     priv_key_dest: /root/.ssh/id_rsa-dehydrated
-    pub_key_src: d.mx/root/.ssh/d.mx-id_rsa-dehydrated.pub
+    pub_key_src: d.mx.oopen.de/root/.ssh/d.mx-id_rsa-dehydrated.pub
     pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
   - name: id-rsa-opendkim
-    priv_key_src: d.mx/root/.ssh/d.mx-id_rsa-opendkim
+    priv_key_src: d.mx.oopen.de/root/.ssh/d.mx-id_rsa-opendkim
     priv_key_dest: /root/.ssh/id_rsa-opendkim
-    pub_key_src: d.mx/root/.ssh/d.mx-id_rsa-opendkim.pub
+    pub_key_src: d.mx.oopen.de/root/.ssh/d.mx-id_rsa-opendkim.pub
     pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
 
 
@@ -151,28 +151,6 @@ root_ssh_keypair:
 # vars used by roles/common/tasks/copy_files.yml
 # ---
 
-copy_plain_files:
-
-  - name: postfix_create_opendkim_key.conf
-    src_path: d.mx/root/bin/postfix/conf/create_opendkim_key.conf
-    dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
-
-  - name: postfix_whitelist_mb_sigs.conf
-    src_path: d.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
-    dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
-
-  - name: install_sympa.conf
-    src_path: lists.mx.warenform/usr/local/src/sympa/conf/install_sympa.conf
-    dest_path: /usr/local/src/sympa/conf/install_sympa.conf
-
-
-copy_template_files: []
-#
-#  - name: mailsystem_install_amavis.conf
-#    src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
-#    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
-
-
 
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml

host_vars/dc-opp.oopen.de/dc-opp-common.yml

@@ -139,4 +139,3 @@ resolved_fallback_nameserver:
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/devel-cloud.wf.netz/devel-cloud-common.yml

@@ -1,4 +1,5 @@
 ---
+# yamllint disable rule:line-length
 
 # ---
 # vars used by roles/ansible_dependencies
@@ -150,4 +151,3 @@ sudo_users:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/devel-db.wf.netz/devel-db-common.yml

@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
 # ---
 
 
-
 # ---
 # vars used by roles/common/tasks/samba-config-server.yml
 # vars used by roles/common/tasks/samba-user.yml
 # ---
 
 
-
-
 # ==============================
 
 

host_vars/devel-php.wf.netz/devel-php-common.yml

@@ -149,15 +149,12 @@ resolved_fallback_nameserver:
 # ---
 
 
-
 # ---
 # vars used by roles/common/tasks/samba-config-server.yml
 # vars used by roles/common/tasks/samba-user.yml
 # ---
 
 
-
-
 # ==============================
 
 

host_vars/devel-repos.wf.netz/devel-repos-common.yml

@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
 # ---
 
 
-
 # ---
 # vars used by roles/common/tasks/samba-config-server.yml
 # vars used by roles/common/tasks/samba-user.yml
 # ---
 
 
-
-
 # ==============================
 
 

host_vars/devel-root.wf.netz/devel-root-common.yml

@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
 # ---
 
 
-
 # ---
 # vars used by roles/common/tasks/samba-config-server.yml
 # vars used by roles/common/tasks/samba-user.yml
 # ---
 
 
-
-
 # ==============================
 
 

host_vars/devel-wiki.wf.netz/devel-wiki-common.yml

@@ -142,15 +142,12 @@ resolved_fallback_nameserver:
 # ---
 
 
-
 # ---
 # vars used by roles/common/tasks/samba-config-server.yml
 # vars used by roles/common/tasks/samba-user.yml
 # ---
 
 
-
-
 # ==============================
 
 

host_vars/dns0.warenform.de/dns0-common.yml

@@ -121,4 +121,3 @@ git_firewall_repository: {}
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/dns1.warenform.de/dns1-common.yml

@@ -138,4 +138,3 @@ git_firewall_repository: {}
 # ---
 # vars used by scripts/reset_root_passwd.yml
 # ---
-

host_vars/e.mx.oopen.de/e.mx-common.yml

@@ -105,17 +105,17 @@ resolved_fallback_nameserver:
 
 insert_root_ssh_keypair: true
 
-root_ssh_keypair:
+# root_ssh_keypair:
-  - name: id-rsa-dehydrated
+#  - name: id-rsa-dehydrated
-    priv_key_src: e.mx/root/.ssh/e.mx-id_rsa-dehydrated
+#    priv_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-dehydrated
-    priv_key_dest: /root/.ssh/id_rsa-dehydrated
+#    priv_key_dest: /root/.ssh/id_rsa-dehydrated
-    pub_key_src: e.mx/root/.ssh/e.mx-id_rsa-dehydrated.pub
+#    pub_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-dehydrated.pub
-    pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
+#    pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
-  - name: id-rsa-opendkim
+#  - name: id-rsa-opendkim
-    priv_key_src: e.mx/root/.ssh/e.mx-id_rsa-opendkim
+#    priv_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-opendkim
-    priv_key_dest: /root/.ssh/id_rsa-opendkim
+#    priv_key_dest: /root/.ssh/id_rsa-opendkim
-    pub_key_src: e.mx/root/.ssh/e.mx-id_rsa-opendkim.pub
+#    pub_key_src: e.mx.oopen.de/root/.ssh/e.mx-id_rsa-opendkim.pub
-    pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
+#    pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
 
 
 # ---
@@ -151,36 +151,6 @@ root_ssh_keypair:
 # vars used by roles/common/tasks/copy_files.yml
 # ---
 
-copy_plain_files:
-
-  - name: monitoring_check_cert_for_dovecot.conf
-    src_path: e.mx/root/bin/monitoring/conf/check_cert_for_dovecot.conf
-    dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
-
-  - name: postfix_create_opendkim_key.conf
-    src_path: e.mx/root/bin/postfix/conf/create_opendkim_key.conf
-    dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
-
-  - name: postfix_postfix_add_mailboxes.conf
-    src_path: e.mx/root/bin/postfix/conf/postfix_add_mailboxes.conf
-    dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
-
-  - name: postfix_sent_userinfo_postfix.conf
-    src_path: e.mx/root/bin/postfix/conf/sent_userinfo_postfix.conf
-    dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
-
-  - name: postfix_whitelist_mb_sigs.conf
-    src_path: e.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
-    dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
-
-
-copy_template_files: []
-#
-#  - name: mailsystem_install_amavis.conf
-#    src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
-#    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
-
-
 
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -211,30 +181,31 @@ si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07e
 #
 website_name_postfixadmin: adm-e.oopen.de
 
-email_welcome_message: "\n
+email_welcome_message: |
-Hallo,\n
 
-Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
+  Hallo,
 
-O.OPEN\n
+  Ihre/Deine neue E-Mail Adresse ist eingerichtet.
 
---\n
+  O.OPEN
-O.OPEN            |   Phone:  +49 30 / 290 484 91\n
+
-Erkelenzdamm 21   |   Fax:    +49 30 / 290 484 99\n
+  --
-D-10999 Berlin    |   E-MAIL: oo@oopen.de\n
+  O.OPEN            |   Phone:  +49 30 / 290 484 91
-"
+  Erkelenzdamm 21   |   Fax:    +49 30 / 290 484 99
+  D-10999 Berlin    |   E-MAIL: oo@oopen.de
 
 # install_update_dovecot.conf
 #
 dovecot_from_address: "o.open <oo@oopen.de>"
 dovecot_reply_to: "oo@oopen.de"
 webmailer_address: "https://webmail-e.oopen.de"
-salutation: "O.OPEN\n
+salutation: |
+  O.OPEN
 
---\n
+  --
-O.OPEN           |   Phone:  +49 30 / 290 484 91\n
+  O.OPEN           |   Phone:  +49 30 / 290 484 91
-Erkelenzdamm 21  |   Fax:    +49 30 / 290 484 99\n
+  Erkelenzdamm 21  |   Fax:    +49 30 / 290 484 99
-D-10999 Berlin   |   http://oopen.de"
+  D-10999 Berlin   |   http://oopen.de
 
 # install_upgrade_roundcube-webmail.conf
 #

host_vars/file-ah.kanzlei-kiel.netz/file-ah-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -233,7 +233,6 @@ default_user:
       - 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIItQLQ7lhBY2USF4Jcp4teF+1NydI73VeHYbQW8q4Mcw root@gw-ah'
 
 
-
 # ---
 # vars used by roles/common/tasks/cron.yml
 # ---
@@ -281,7 +280,6 @@ cron_user_special_time_entries:
 #    insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---

host_vars/file-blkr-alt.blkr.netz/file-blkr-alt-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -177,7 +177,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---

host_vars/file-blkr.blkr.netz/file-blkr-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -177,7 +177,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---

host_vars/file-dissens.dissens.netz/file-dissens-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:

host_vars/file-ebs.ebs.netz/file-ebs-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -247,7 +247,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -305,7 +304,6 @@ nfs_exports:
     use_fsid_option: true
 
 
-
 # ---
 # vars used by roles/common/tasks/samba-config-server.yml
 # vars used by roles/common/tasks/samba-user.yml
@@ -557,7 +555,6 @@ samba_shares:
     vfs_object_recycle: false
 
 
-
 # ==============================
 
 

host_vars/file-fhxb.fhxb.netz/file-fhxb-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -156,7 +156,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -225,7 +224,6 @@ nfs_exports:
     use_fsid_option: true
 
 
-
 # ---
 # vars used by roles/common/tasks/samba-config-server.yml
 # vars used by roles/common/tasks/samba-user.yml
@@ -963,7 +961,6 @@ samba_shares:
     recycle_path: '@Recycle'
 
 
-
 # ==============================
 
 

host_vars/file-fm.fm.netz/file-fm-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:

host_vars/file-ipa.local.netz/file-ipa-common.yml

@@ -73,7 +73,6 @@ install_compiler_pkgs: true
 #    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
 
 
-
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
 # ---

host_vars/file-kb.anw-kb.netz/file-kb-common.yml

@@ -112,7 +112,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---

host_vars/file-km-alt.anw-km.netz/file-km-alt-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -214,7 +214,6 @@ cron_user_entries:
     job: /root/bin/monitoring/check_ntpsec_service.sh
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -287,7 +286,6 @@ samba_groups:
     group_id: 1190
 
 
-
 samba_user:
 
   - name: advoware
@@ -591,7 +589,6 @@ samba_user:
     password: 'uJ5gF/m53p.P'
 
 
-
   - name: aphex2
     groups:
       - alle

host_vars/file-km.anw-km.netz/file-km-common.yml

@@ -4,10 +4,10 @@
 # ---
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -630,7 +630,6 @@ samba_user:
     password: "uJ5gF/m53p.P"
 
 
-
   - name: aphex2
     groups:
       - alle
@@ -843,6 +842,8 @@ samba_shares:
     file_create_mask: !!str 660
     dir_create_mask: !!str 2770
     vfs_object_virusfilter: true
+    vfs_object_virusfilter_include_files:
+      - eml
     vfs_object_recycle: false
 
   - name: eibelshaeuser
@@ -901,6 +902,10 @@ samba_shares:
     file_create_mask: !!str 660
     dir_create_mask: !!str 2770
     vfs_object_virusfilter: true
+    vfs_object_virusfilter_include_files:
+      - eml
+      - exe
+      - msi
     vfs_object_recycle: true
     recycle_path: "@Recycle"
     vfs_object_recycle_is_visible: true
@@ -925,6 +930,9 @@ samba_shares:
     file_create_mask: !!str 660
     dir_create_mask: !!str 2770
     vfs_object_virusfilter: true
+    vfs_object_virusfilter_exclude_files:
+      - docx
+      - pdf
     vfs_object_recycle: true
     recycle_path: "@Recycle"
     vfs_object_recycle_is_visible: true
@@ -965,6 +973,16 @@ samba_shares:
     recycle_path: "@Recycle"
     vfs_object_recycle_is_visible: true
 
+  - name: Windows-Server-2025-Backup
+    comment: Windows-Server-2025-Backup  on Fileserver
+    path: /data/samba/Windows-Server-2025-Backup
+    group_valid_users: sysadm
+    group_write_list: sysadm
+    file_create_mask: !!str 664
+    dir_create_mask: !!str 2775
+    guest_ok: !!str yes
+    vfs_object_recycle: false
+
 #  - name: web
 #    comment: Web auf Fileserver
 #    path: /data/samba/Web

host_vars/formbricks-nd.oopen.de/formbricks-nd-common.yml

@@ -132,7 +132,6 @@ cron_user_entries:
     job: /root/bin/monitoring/check_ssh.sh
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -197,4 +196,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/g.mx.oopen.de/g.mx-common.yml

@@ -105,14 +105,14 @@ resolved_fallback_nameserver:
 #
 # root_ssh_keypair:
 #  - name: id-rsa-dehydrated
-#    priv_key_src: b.mx/root/.ssh/b.mx-id_rsa-dehydrated
+#    priv_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-dehydrated
 #    priv_key_dest: /root/.ssh/id_rsa-dehydrated
-#    pub_key_src: b.mx/root/.ssh/b.mx-id_rsa-dehydrated.pub
+#    pub_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-dehydrated.pub
 #    pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
 #  - name: id-rsa-opendkim
-#    priv_key_src: b.mx/root/.ssh/b.mx-id_rsa-opendkim
+#    priv_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-opendkim
 #    priv_key_dest: /root/.ssh/id_rsa-opendkim
-#    pub_key_src: b.mx/root/.ssh/b.mx-id_rsa-opendkim.pub
+#    pub_key_src: g.mx.oopen.de/root/.ssh/b.mx-id_rsa-opendkim.pub
 #    pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
 
 
@@ -149,42 +149,6 @@ resolved_fallback_nameserver:
 # vars used by roles/common/tasks/copy_files.yml
 # ---
 
-copy_plain_files:
-
-  # /root/bin/postfix
-  #
-  - name: postfix_create_opendkim_key.conf
-    src_path: g.mx/root/bin/postfix/conf/create_opendkim_key.conf
-    dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
-
-  - name: postfix_whitelist_mb_sigs.conf
-    src_path: g.mx/root/bin/postfix/conf/whitelist_mb_sigs.conf
-    dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
-
-
-copy_plain_files_postfix_host_specific:
-
-  - name: relay_domains
-    src_path: g.mx/etc/postfix/relay_domains
-    dest_path: /etc/postfix/relay_domains
-
-
-copy_plain_files_postfwd_host_specific:
-
-  # Postfix Firewall postfwd
-  #
-  - name: postfwd.wl-nets
-    src_path: g.mx/etc/postfix/postfwd.wl-nets
-    dest_path: /etc/postfix/postfwd.wl-nets
-
-
-copy_template_files: []
-#
-#  - name: mailsystem_install_amavis.conf
-#    src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
-#    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
-
-
 
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml

host_vars/ga-al-gw.oopen.de/ga-al-gw-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -482,7 +482,6 @@ bind9_gateway_acl:
       - 192.168.10.2
 
 
-
 bind9_gateway_listen_on_v6:
   - none
 
@@ -529,4 +528,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/ga-al-kvm2.ga.netz/ga-al-kvm2-common.yml

@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
 # ---
 
 
-
 # ==============================
 
 

host_vars/ga-al-kvm3.ga.netz/ga-al-kvm3-common.yml

@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
 # ---
 
 
-
 # ==============================
 
 

host_vars/ga-al-relay.ga.netz/ga-al-relay-common.yml

@@ -163,14 +163,14 @@ insert_root_ssh_keypair: true
 
 root_ssh_keypair:
   - name: id-rsa-dehydrated
-    priv_key_src: ga-st-mail/root/.ssh/ga-st-mail-id_rsa-dehydrated
+    priv_key_src: ga-al-relay.ga.netz/root/.ssh/ga-st-mail-id_rsa-dehydrated
     priv_key_dest: /root/.ssh/id_rsa-dehydrated
-    pub_key_src: ga-st-mail/root/.ssh/ga-st-mail-id_rsa-dehydrated.pub
+    pub_key_src: ga-al-relay.ga.netz/root/.ssh/ga-st-mail-id_rsa-dehydrated.pub
     pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
   - name: id-rsa-opendkim
-    priv_key_src: ga-st-mail/root/.ssh/ga-st-mail-id_rsa-opendkim
+    priv_key_src: ga-al-relay.ga.netz/root/.ssh/ga-st-mail-id_rsa-opendkim
     priv_key_dest: /root/.ssh/id_rsa-opendkim
-    pub_key_src: ga-st-mail/root/.ssh/ga-st-mail-id_rsa-opendkim.pub
+    pub_key_src: ga-al-relay.ga.netz/root/.ssh/ga-st-mail-id_rsa-opendkim.pub
     pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
 
 
@@ -233,7 +233,6 @@ bind9_gateway_acl:
       - 192.168.10.2
 
 
-
 bind9_gateway_listen_on_v6:
   - none
 
@@ -273,21 +272,6 @@ bind9_gateway_allow_recursion:
 # ---
 
 
-copy_plain_files_postfix_host_specific:
-
-  - name: relay_domains
-    src_path: ga-al-relay/etc/postfix/relay_domains
-    dest_path: /etc/postfix/relay_domains
-
-
-copy_template_files: []
-#
-#  - name: mailsystem_install_amavis.conf
-#    src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
-#    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
-
-
-
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
 # ---
@@ -301,7 +285,6 @@ is_relay_host: !!str "false"
 sasl_auth_enable: !!str "yes"
 
 
-
 template_files_mailsystem_script:
 
   - name: mailsystem_install_postfix_advanced.conf

host_vars/ga-campus-gw-temp.ga.netz/ga-campus-gw-temp-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -45,7 +45,6 @@ network_interfaces:
       - /sbin/ip route add 10.9.131.0/24 via 192.168.100.253
 
 
-
   - device: eno3
     family: inet
     method: manual
@@ -109,7 +108,6 @@ network_interfaces:
     netmask: 24
 
 
-
 # ---
 # vars used by roles/ansible_dependencies
 # ---
@@ -391,4 +389,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/ga-gh-gw.oopen.de/ga-gh-gw-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -404,4 +404,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/ga-nh-gw.oopen.de/ga-nh-gw-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -408,4 +408,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/ga-st-gw-ersatz.ga.netz/ga-st-gw-ersatz-common.yml

@@ -102,7 +102,6 @@ resolved_fallback_nameserver:
   - 127.0.0.1
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -285,4 +284,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/ga-st-gw.ga.netz/ga-st-gw-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -451,7 +451,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -632,4 +631,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/ga-st-kvm1.ga.netz/ga-st-kvm1-common.yml

@@ -123,7 +123,6 @@ sshd_permit_root_login: !!str "prohibit-password"
 # ---
 
 
-
 # ==============================
 
 

host_vars/ga-st-kvm5.ga.netz/ga-st-kvm5-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -195,7 +195,6 @@ sshd_permit_root_login: !!str "prohibit-password"
 # ---
 
 
-
 # ==============================
 
 

host_vars/ga-st-lxc1.ga.netz/ga-st-lxc1-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -311,4 +311,3 @@ sudo_users:
 # ---
 
 root_user: {}
-

host_vars/ga-st-mail.ga.netz/ga-st-mail-common.yml

@@ -108,14 +108,14 @@ insert_root_ssh_keypair: true
 
 root_ssh_keypair:
   - name: id-rsa-dehydrated
-    priv_key_src: ga-st-mail/root/.ssh/ga-st-mail-id_rsa-dehydrated
+    priv_key_src: ga-st-mail.ga.netz/root/.ssh/ga-st-mail-id_rsa-dehydrated
     priv_key_dest: /root/.ssh/id_rsa-dehydrated
-    pub_key_src: ga-st-mail/root/.ssh/ga-st-mail-id_rsa-dehydrated.pub
+    pub_key_src: ga-st-mail.ga.netz/root/.ssh/ga-st-mail-id_rsa-dehydrated.pub
     pub_key_dest: /root/.ssh/id_rsa-dehydrated.pub
   - name: id-rsa-opendkim
-    priv_key_src: ga-st-mail/root/.ssh/ga-st-mail-id_rsa-opendkim
+    priv_key_src: ga-st-mail.ga.netz/root/.ssh/ga-st-mail-id_rsa-opendkim
     priv_key_dest: /root/.ssh/id_rsa-opendkim
-    pub_key_src: ga-st-mail/root/.ssh/ga-st-mail-id_rsa-opendkim.pub
+    pub_key_src: ga-st-mail.ga.netz/root/.ssh/ga-st-mail-id_rsa-opendkim.pub
     pub_key_dest: /root/.ssh/id_rsa-opendkim.pub
 
 default_user:
@@ -206,49 +206,6 @@ sudo_users:
 # vars used by roles/common/tasks/copy_files.yml
 # ---
 
-copy_plain_files:
-
-  # /root/bin/monitoring
-  #
-  - name: monitoring_check_cert_for_dovecot.conf
-    src_path: ga-st-mail/root/bin/monitoring/conf/check_cert_for_dovecot.conf
-    dest_path: /root/bin/monitoring/conf/check_cert_for_dovecot.conf
-
-  # /root/bin/postfix
-  #
-  - name: postfix_create_opendkim_key.conf
-    src_path: ga-st-mail/root/bin/postfix/conf/create_opendkim_key.conf
-    dest_path: /root/bin/postfix/conf/create_opendkim_key.conf
-
-  - name: postfix_postfix_add_mailboxes.conf
-    src_path: ga-st-mail/root/bin/postfix/conf/postfix_add_mailboxes.conf
-    dest_path: /root/bin/postfix/conf/postfix_add_mailboxes.conf
-
-  - name: postfix_sent_userinfo_postfix.conf
-    src_path: ga-st-mail/root/bin/postfix/conf/sent_userinfo_postfix.conf
-    dest_path: /root/bin/postfix/conf/sent_userinfo_postfix.conf
-
-  - name: postfix_whitelist_mb_sigs.conf
-    src_path: ga-st-mail/root/bin/postfix/conf/whitelist_mb_sigs.conf
-    dest_path: /root/bin/postfix/conf/whitelist_mb_sigs.conf
-
-
-copy_plain_files_postfwd_host_specific:
-
-  # Postfix Firewall postfwd
-  #
-  - name: postfwd.wl-user
-    src_path: ga-st-mail/etc/postfix/postfwd.cf
-    dest_path: /etc/postfix/postfwd.cf
-
-
-#copy_template_files: []
-#
-#  - name: mailsystem_install_amavis.conf
-#    src_path: usr/local/src/mailsystem/conf/install_amavis.conf.j2
-#    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
-
-
 
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
@@ -282,31 +239,33 @@ si_authorisation_signature: abb4ec6b194639f3d123154f1b971843a3b8751d8c1bcdc7d07e
 #
 website_name_postfixadmin: adm.gemeinschaft-altenschlirf.de
 
-email_welcome_message: "\n
+email_welcome_message: |
-Hallo,\n
 
-Ihre/Deine neue E-Mail Adresse ist eingerichtet.\n
+  Hallo,
 
-IT Team Gemeinschaft Altenschlirf\n
+  Ihre/Deine neue E-Mail Adresse ist eingerichtet.
 
---\n
+  IT Team Gemeinschaft Altenschlirf
-Gemeinschaft Altenschlirf  |   Phone:  +49 6647 / 9606 0\n
+
-Müser Straße 1             |   Fax:    +49 6647 / 9606 179\n
+  --
-D-36358 Herbstein          |   E-Mail: it@gemeinschaft-altenschlirf.de\n
+
-"
+  Gemeinschaft Altenschlirf  |   Phone:  +49 6647 / 9606 0
+  Müser Straße 1             |   Fax:    +49 6647 / 9606 179
+  D-36358 Herbstein          |   E-Mail: it@gemeinschaft-altenschlirf.de
 
 # install_update_dovecot.conf
 #
 dovecot_from_address: "Administrator E-Mail <postmaster@gemeinschaft-altenschlirf.de>"
 dovecot_reply_to: "postmaster@gemeinschaft-altenschlirf.de"
 webmailer_address: "https://webmail.gemeinschaft-altenschlirf.de"
-salutation: "IT Team Gemeinschaft Altenschlirf\n
+salutation: |
+  IT Team Gemeinschaft Altenschlirf
 
---\n
+  --
-Gemeinschaft Altenschlirf  |   Phone:  +49 6647 / 9606 0\n
+
-Müser Straße 1             |   Fax:    +49 6647 / 9606 179\n
+  Gemeinschaft Altenschlirf  |   Phone:  +49 6647 / 9606 0
-D-36358 Herbstein          |   E-Mail: it@gemeinschaft-altenschlirf.de\n
+  Müser Straße 1             |   Fax:    +49 6647 / 9606 179
-"
+  D-36358 Herbstein          |   E-Mail: it@gemeinschaft-altenschlirf.de
 
 # install_upgrade_roundcube-webmail.conf
 #

host_vars/ga-st-mm.ga.netz/ga-st-mm-common.yml

@@ -209,7 +209,6 @@ sudo_users:
 # ---
 
 
-
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
 # ---

host_vars/ga-st-services.ga.netz/ga-st-services-common.yml

@@ -207,7 +207,6 @@ sudo_users:
 #    dest_path: /usr/local/src/mailsystem/conf/install_amavis.conf
 
 
-
 # ---
 # vars used by roles/common/tasks/config_files_mailsystem_scripts.yml
 # ---

host_vars/git.oopen.de/git-common.yml

@@ -145,4 +145,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/git.warenform.de/git-common.yml

@@ -83,7 +83,6 @@ resolved_nameserver:
   - 2a01:4f8:0:1::add:9999
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -133,4 +132,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gitea.so36.net/gitea-common.yml

@@ -1,4 +1,5 @@
 ---
+# yamllint disable rule:line-length
 
 # ---
 # vars used by role firewall
@@ -272,4 +273,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-123.oopen.de/gw-123-common.yml

@@ -219,4 +219,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-

host_vars/gw-ah.oopen.de/gw-ah-common.yml

@@ -271,4 +271,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-ak.oopen.de/gw-ak-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -244,4 +244,3 @@ bind9_gateway_listen_on:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-akb.oopen.de/gw-akb-common.yml

@@ -214,4 +214,3 @@ bind9_gateway_listen_on:
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-

host_vars/gw-b3.oopen.de/gw-b3-common.yml

@@ -166,8 +166,6 @@ cron_user_special_time_entries:
     insertafter: PATH
 
 
-
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -204,4 +202,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-

host_vars/gw-blkr.oopen.de/gw-blkr-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -287,4 +287,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-campus.oopen.de/gw-campus-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -45,7 +45,6 @@ network_interfaces:
       - /sbin/ip route add 10.9.131.0/24 via 192.168.100.253
 
 
-
   - device: eno3
     family: inet
     method: manual
@@ -109,7 +108,6 @@ network_interfaces:
     netmask: 24
 
 
-
 # ---
 # vars used by roles/ansible_dependencies
 # ---
@@ -441,4 +439,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-ckubu.local.netz/gw-ckubu-common.yml

@@ -149,7 +149,6 @@ cron_user_entries:
     job: /root/bin/admin-stuff/speedtest.sh
 
 
-
 cron_user_special_time_entries:
 
   - name: "Restart NTP service 'ntpsec'"
@@ -214,4 +213,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-d11.oopen.de/gw-d11-common.yml

@@ -215,4 +215,3 @@ bind9_gateway_listen_on:
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-

host_vars/gw-dissens.oopen.de/gw-dissens-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -356,4 +356,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-ebs.oopen.de/gw-ebs-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -319,4 +319,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-elster.oopen.de/gw-elster-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -222,7 +222,6 @@ resolved_fallback_nameserver:
   - 194.150.168.168
 
 
-
 # ---
 # vars used by roles/common/tasks/users.yml
 # ---
@@ -331,4 +330,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-fhxb.oopen.de/gw-fhxb-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -274,4 +274,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-flr.oopen.de/gw-flr-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -286,4 +286,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-fm.oopen.de/gw-fm-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -295,4 +295,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-irights.oopen.de/gw-irights-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -282,4 +282,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-kb.oopen.de/gw-kb-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -274,4 +274,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-km.oopen.de/gw-km-common.yml

@@ -5,10 +5,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -273,4 +273,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-mbr.oopen.de/gw-mbr-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -377,4 +377,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-opp-neu.opp.netz/gw-opp-neu-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -233,4 +233,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-opp.oopen.de/gw-opp-common.yml

@@ -6,10 +6,10 @@
 
 
 # If true, all additional files in /etc/network/interfaces/interfaces.d/ are deleted
-network_manage_devices: True
+network_manage_devices: true
 
 # Should the interfaces be reloaded after config change?
-network_interface_reload: False
+network_interface_reload: false
 
 network_interface_path: /etc/network/interfaces.d
 network_interface_required_packages:
@@ -276,4 +276,3 @@ git_firewall_repository:
 root_user:
   name: root
   password: $6$J1ssJfdshf/$mknQEPDcW4HN5.wFfawbamamywI7F7fhdZmaR1abNrc4DA7DNRx766lz3ygf9YV3gcmRq3QhJ3fBVlkwGMCvq.
-

host_vars/gw-replacement4.local.netz/gw-replacement4-common.yml

@@ -172,4 +172,3 @@ bind9_gateway_listen_on:
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-

host_vars/gw-replacment.oopen.de/gw-replacment-common.yml

@@ -154,4 +154,3 @@ install_bind_packages: true
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-

host_vars/gw-replacment2.oopen.de/gw-replacment2-common.yml

@@ -154,4 +154,3 @@ install_bind_packages: true
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-

host_vars/gw-replacment3.oopen.de/gw-replacment3-common.yml

@@ -154,4 +154,3 @@ install_bind_packages: true
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-

host_vars/gw-spr.oopen.de/gw-spr-common.yml

@@ -214,4 +214,3 @@ bind9_gateway_listen_on:
 root_user:
   name: root
   password: $y$j9T$IVBTpn.OrI6YiQ9q3fA8b1$Y1bmID5yXJbKfoLFt1VmQs6LezeTj5/1M9ppZBD2Pn4
-