Fix stale sftp IP, ansible.cfg keys, drop dead shutdown playbook

- sftp IP 192.168.99.68 in CLAUDE.md and server README (DMZ move)
- ansible.cfg: ansible_python_interpreter is a host var, moved to
  group_vars/all.yml; [ssh_connections] -> [ssh_connection] so
  pipelining actually applies
- remove playbooks/shutdown.yml (targeted nonexistent k3s_cluster group)

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

CLAUDE.md

@@ -25,14 +25,16 @@ ansible/                    # Global settings & configuration for all servers
   group_vars/<group>.yml    # Per-host overrides ONLY — no copies of all.yml values
   group_vars/secrets.yml    # ansible-vault encrypted secrets — never commit plaintext
   run.yml                   # Main playbook
-  playbooks/                # Utility playbooks (update.yml, shutdown.yml)
+  playbooks/                # Utility playbooks (update.yml)
   roles/                    # Custom roles (e.g. nextcloud)
   requirements.yml          # External Galaxy roles (geerlingguy.*, ...)
   justfile                  # Task runner: just run HOST, just reqs, just vault ACTION
 
 server/<hostname>/          # Host-specific docs, scripts, files
   README.md                 # Server documentation, filled gradually
-  manuals/                  # Runbooks, dated YYYYMMDD-<topic>.md
+  manuals/                  # Runbooks (how-to), dated YYYYMMDD-<topic>.md
+  notes/                    # Assessments, planning docs, working notes (dated)
+  scripts/                  # Host-related helper scripts
   HW.md                     # Hardware specs (where relevant)
 ```
 
@@ -43,7 +45,7 @@ server/<hostname>/          # Host-specific docs, scripts, files
 | phy-z-srv-jira   | 192.168.66.41 | configured                      |
 | phy-z-srv-cloud  | 192.168.66.66 | configured (Nextcloud)          |
 | phy-z-srv-git    | 192.168.66.67 | configured                      |
-| phy-z-dmz-sftp01 | 192.168.66.68 | configured                      |
+| phy-z-dmz-sftp01 | 192.168.99.68 | configured                      |
 | phy-z-srv-gpu01  | 192.168.66.69 | planned — setup is the next task|
 
 ## Conventions

ansible/ansible.cfg

@@ -1,9 +1,8 @@
 [defaults]
 nocows = 1
 host_key_checking = false
-inventory = ./hosts.ini 
-ansible_python_interpreter  = /usr/bin/python3
+inventory = ./hosts.ini
 vault_password_file = ~/.ansible/vault_pass
 
-[ssh_connections]
+[ssh_connection]
 pipelining = true

ansible/group_vars/all.yml

@@ -2,6 +2,7 @@
 # connection settings (identical for all hosts)
 ansible_user: sbxadmin
 ansible_port: 22
+ansible_python_interpreter: /usr/bin/python3
 
 # generic settings
 main_username: sbxadmin

ansible/playbooks/shutdown.yml

@@ -1,9 +0,0 @@
----
-- name: Shutdown k3s_cluster
-  hosts: k3s_cluster
-  gather_facts: true
-  tasks:
-    - name: Shutdown the nodes (and wait one 1 min)
-      become: true
-      community.general.shutdown:
-        delay: 60

server/phy-z-dmz-sftp01/README.md

@@ -4,7 +4,7 @@ SFTP server in the DMZ for file exchange with external partners.
 
 | | |
 | - | - |
-| IP | 192.168.66.68 |
+| IP | 192.168.99.68 |
 | Ansible group | `phy_z_dmz_sftp01` |
 | Status | configured |