- Always run install-ssh-key (drop unreliable sftp idempotency check
that was bypassed by SSH agent forwarding)
- Use sshpass -e (env var) instead of -p to avoid shell quoting issues
with special characters in passwords
- Add -o IdentitiesOnly=yes to prevent agent keys interfering
- Add reachable_externally: true to access_settings (was being reset
to false on every run)
- Remove storage_box.yml from deploy.yml chain — Ansible loads
group_vars at startup so storagebox.yml must exist before deploy.yml
- Document storage_box.yml as a prerequisite step in README, CLAUDE.md,
and setup.sh next steps
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Matthias Johnson
16da843131