diff --git a/CLAUDE.md b/CLAUDE.md
index c16b1f7..ea2e4e4 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -25,14 +25,16 @@ ansible/                    # Global settings & configuration for all servers
   group_vars/<group>.yml    # Per-host overrides ONLY — no copies of all.yml values
   group_vars/secrets.yml    # ansible-vault encrypted secrets — never commit plaintext
   run.yml                   # Main playbook
-  playbooks/                # Utility playbooks (update.yml, shutdown.yml)
+  playbooks/                # Utility playbooks (update.yml)
   roles/                    # Custom roles (e.g. nextcloud)
   requirements.yml          # External Galaxy roles (geerlingguy.*, ...)
   justfile                  # Task runner: just run HOST, just reqs, just vault ACTION
 
 server/<hostname>/          # Host-specific docs, scripts, files
   README.md                 # Server documentation, filled gradually
-  manuals/                  # Runbooks, dated YYYYMMDD-<topic>.md
+  manuals/                  # Runbooks (how-to), dated YYYYMMDD-<topic>.md
+  notes/                    # Assessments, planning docs, working notes (dated)
+  scripts/                  # Host-related helper scripts
   HW.md                     # Hardware specs (where relevant)
 ```
 
@@ -43,7 +45,7 @@ server/<hostname>/          # Host-specific docs, scripts, files
 | phy-z-srv-jira   | 192.168.66.41 | configured                      |
 | phy-z-srv-cloud  | 192.168.66.66 | configured (Nextcloud)          |
 | phy-z-srv-git    | 192.168.66.67 | configured                      |
-| phy-z-dmz-sftp01 | 192.168.66.68 | configured                      |
+| phy-z-dmz-sftp01 | 192.168.99.68 | configured                      |
 | phy-z-srv-gpu01  | 192.168.66.69 | planned — setup is the next task|
 
 ## Conventions
diff --git a/ansible/ansible.cfg b/ansible/ansible.cfg
index 59eae14..956624d 100644
--- a/ansible/ansible.cfg
+++ b/ansible/ansible.cfg
@@ -1,9 +1,8 @@
 [defaults]
 nocows = 1
 host_key_checking = false
-inventory = ./hosts.ini 
-ansible_python_interpreter  = /usr/bin/python3
+inventory = ./hosts.ini
 vault_password_file = ~/.ansible/vault_pass
 
-[ssh_connections]
+[ssh_connection]
 pipelining = true
diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml
index 473c89f..0dae52b 100644
--- a/ansible/group_vars/all.yml
+++ b/ansible/group_vars/all.yml
@@ -2,6 +2,7 @@
 # connection settings (identical for all hosts)
 ansible_user: sbxadmin
 ansible_port: 22
+ansible_python_interpreter: /usr/bin/python3
 
 # generic settings
 main_username: sbxadmin
diff --git a/ansible/playbooks/shutdown.yml b/ansible/playbooks/shutdown.yml
deleted file mode 100644
index 8691d4b..0000000
--- a/ansible/playbooks/shutdown.yml
+++ /dev/null
@@ -1,9 +0,0 @@
----
-- name: Shutdown k3s_cluster
-  hosts: k3s_cluster
-  gather_facts: true
-  tasks:
-    - name: Shutdown the nodes (and wait one 1 min)
-      become: true
-      community.general.shutdown:
-        delay: 60
diff --git a/server/phy-z-dmz-sftp01/README.md b/server/phy-z-dmz-sftp01/README.md
index afee3af..65b7de2 100644
--- a/server/phy-z-dmz-sftp01/README.md
+++ b/server/phy-z-dmz-sftp01/README.md
@@ -4,7 +4,7 @@ SFTP server in the DMZ for file exchange with external partners.
 
 | | |
 | - | - |
-| IP | 192.168.66.68 |
+| IP | 192.168.99.68 |
 | Ansible group | `phy_z_dmz_sftp01` |
 | Status | configured |