diff --git a/CLAUDE.md b/CLAUDE.md
index ea2e4e4..b137589 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -26,7 +26,7 @@ ansible/                    # Global settings & configuration for all servers
   group_vars/secrets.yml    # ansible-vault encrypted secrets — never commit plaintext
   run.yml                   # Main playbook
   playbooks/                # Utility playbooks (update.yml)
-  roles/                    # Custom roles (e.g. nextcloud)
+  roles/                    # Custom roles (nextcloud, nvidia_gpu)
   requirements.yml          # External Galaxy roles (geerlingguy.*, ...)
   justfile                  # Task runner: just run HOST, just reqs, just vault ACTION
 
diff --git a/ansible/README.md b/ansible/README.md
index 8e3b860..f350d6e 100644
--- a/ansible/README.md
+++ b/ansible/README.md
@@ -7,7 +7,7 @@ Global configuration for all Phytron servers. Run everything from this directory
 - `hosts.ini` — inventory; one group per host (`phy_z_*`), host aliases match the real hostnames
 - `group_vars/all.yml` — defaults for all hosts; `group_vars/<group>.yml` holds per-host overrides only
 - `group_vars/secrets.yml` — ansible-vault encrypted secrets
-- `run.yml` — main playbook; `playbooks/` — utilities (update, shutdown)
+- `run.yml` — main playbook; `playbooks/` — utilities (update.yml)
 - `roles/` — custom roles; external roles come from `requirements.yml`
 
 ## Usage
diff --git a/server/phy-z-dmz-sftp01/README.md b/server/phy-z-dmz-sftp01/README.md
index 65b7de2..816c2a4 100644
--- a/server/phy-z-dmz-sftp01/README.md
+++ b/server/phy-z-dmz-sftp01/README.md
@@ -16,3 +16,7 @@ SFTP server in the DMZ for file exchange with external partners.
 ## Runbooks
 
 - [Add a new SFTP user](manuals/20260204-add-new-user.md)
+
+## Notes
+
+- [SFTP configuration notes (2026-01-30)](notes/20260130-sftp-config.md)