diff --git a/.editorconfig b/.editorconfig
new file mode 100644
index 0000000..ad1bd2a
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,19 @@
+# EditorConfig is awesome: https://EditorConfig.org
+
+# top-most EditorConfig file
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[Makefile]
+indent_style = tab
+tab_width = 2
+
+[*.md]
+trim_trailing_whitespace = false
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..eb5a316
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+target
diff --git a/README.adoc b/README.adoc
index 9c86652..2ae5d71 100644
--- a/README.adoc
+++ b/README.adoc
@@ -1,6 +1,6 @@
 /////
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 /////
 
@@ -132,6 +132,6 @@ $ ansible-playbook -i production site.yml
 [literal.small]
 .....
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 .....
diff --git a/bootstrap.adoc b/bootstrap.adoc
index 820fd56..8450238 100644
--- a/bootstrap.adoc
+++ b/bootstrap.adoc
@@ -1,6 +1,6 @@
 /////
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 /////
 
@@ -538,6 +538,6 @@ I decided to do a clean import, especially since I configured Dovecot in a way
 [literal.small]
 .....
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 .....
diff --git a/roles/_maintenance_start/tasks/main.yml b/roles/_maintenance_start/tasks/main.yml
index 864fd8d..88b641d 100644
--- a/roles/_maintenance_start/tasks/main.yml
+++ b/roles/_maintenance_start/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: stop some services
diff --git a/roles/_maintenance_stop/tasks/main.yml b/roles/_maintenance_stop/tasks/main.yml
index da1cbd5..31be02a 100644
--- a/roles/_maintenance_stop/tasks/main.yml
+++ b/roles/_maintenance_stop/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: stop again services that may got started by handlers
diff --git a/roles/acme_back/files/dehydrated.timer b/roles/acme_back/files/dehydrated.timer
index 2c2211e..41b09aa 100644
--- a/roles/acme_back/files/dehydrated.timer
+++ b/roles/acme_back/files/dehydrated.timer
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 [Unit]
diff --git a/roles/acme_back/handlers/main.yml b/roles/acme_back/handlers/main.yml
index 9325b2b..a6fc7e4 100644
--- a/roles/acme_back/handlers/main.yml
+++ b/roles/acme_back/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart dehydrated.service
diff --git a/roles/acme_back/meta.OK/main.yml b/roles/acme_back/meta.OK/main.yml
index a7b2107..d48b258 100644
--- a/roles/acme_back/meta.OK/main.yml
+++ b/roles/acme_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/acme_back/tasks/main.yml b/roles/acme_back/tasks/main.yml
index fa614f2..b74a518 100644
--- a/roles/acme_back/tasks/main.yml
+++ b/roles/acme_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/acme_back/templates/dehydrated.config.j2 b/roles/acme_back/templates/dehydrated.config.j2
index c6b2263..d7a9ef7 100644
--- a/roles/acme_back/templates/dehydrated.config.j2
+++ b/roles/acme_back/templates/dehydrated.config.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 #CA="https://acme-staging.api.letsencrypt.org/directory"
diff --git a/roles/acme_back/templates/hook.sh.j2 b/roles/acme_back/templates/hook.sh.j2
index 41baf79..e86e25d 100644
--- a/roles/acme_back/templates/hook.sh.j2
+++ b/roles/acme_back/templates/hook.sh.j2
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 RSH=/usr/local/bin/{{DMZ}}
diff --git a/roles/acme_front/handlers/main.yml b/roles/acme_front/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/acme_front/handlers/main.yml
+++ b/roles/acme_front/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/acme_front/meta.OK/main.yml b/roles/acme_front/meta.OK/main.yml
index 7f3de13..8e93caa 100644
--- a/roles/acme_front/meta.OK/main.yml
+++ b/roles/acme_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/acme_front/tasks/main.yml b/roles/acme_front/tasks/main.yml
index 8207a3b..00f08b6 100644
--- a/roles/acme_front/tasks/main.yml
+++ b/roles/acme_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: ensure /srv/acme exists
diff --git a/roles/aur.inc/tasks/install.yml b/roles/aur.inc/tasks/install.yml
index d6a70c3..1bcfa19 100644
--- a/roles/aur.inc/tasks/install.yml
+++ b/roles/aur.inc/tasks/install.yml
@@ -1,9 +1,9 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
-# mandatory parameters: pkg_name, pre_cmd, aur_user
+# mandatory parameters: pkg_name, pre_cmd, aur_name, aur_home
 
 - name: AUR → {{pkg_name}} → read current version
   shell: |
@@ -14,7 +14,7 @@
 - name: AUR → {{pkg_name}} → get metadata from AurJson
   uri:
     url: https://aur.archlinux.org/rpc/?v=5&type=info&arg={{pkg_name | mandatory}}
-  connection: local
+  delegate_to: localhost
   register: aurjson
   changed_when: false
 
@@ -22,7 +22,7 @@
   get_url:
     url: https://aur.archlinux.org{{aurjson.json.results[0].URLPath}}
     dest: /tmp/
-  connection: local
+  delegate_to: localhost
   when:
     - (aurjson.json.results[0].Version != (pacmanQi.stdout | default()))
   register: aur_recipe
@@ -45,6 +45,8 @@
           args:
             chdir: /var/tmp/{{aurjson.json.results[0].PackageBase}}
           when: pre_cmd
+          environment:
+            HOME: "{{aur_home}}"
           register: debugCustom
 
         - name: AUR → {{pkg_name}} → see custom pre-processing commands’ result
@@ -86,6 +88,8 @@
                 - (pacman_output.stdout is defined)
                 - (pacman_output.stdout.find('there is nothing to do') == -1)
 
+          environment:
+            HOME: "{{aur_home}}"
           when:
             - (realVersion.stdout != (pacmanQi.stdout | default()))
 
@@ -97,7 +101,7 @@
           changed_when: false
 
   become: true
-  become_user: "{{aur_user}}"
+  become_user: "{{aur_name}}"
   when:
     - (aurjson.json.results[0].Version != (pacmanQi.stdout | default()))
 
@@ -106,6 +110,6 @@
       file:
         path: '{{aur_recipe.dest}}'
         state: absent
-      connection: local
+      delegate_to: localhost
       become: false
       changed_when: false
diff --git a/roles/aur.inc/tasks/main.yml b/roles/aur.inc/tasks/main.yml
index af78355..fd43350 100644
--- a/roles/aur.inc/tasks/main.yml
+++ b/roles/aur.inc/tasks/main.yml
@@ -1,28 +1,61 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # mandatory parameters:
 # - pkg_names (json-encoded list)
 # - aur_user
 
-- name: AUR → base-devel needed while building
-  become: false
-  command: |
-    pacman -S --noconfirm --noprogressbar --asdeps --needed base-devel
+- name: AUR → read (or create) requested HOME while running AUR tasks
+  shell: |
+    case "$aur_requested_home" in
+    '') printf '%s' "$HOME" ;;
+    '!mktemp') sudo -u "$aur_user_name" mktemp -d /tmp/AUR-TEMP-HOME-XXXX ;;
+    *) printf '%s' "$aur_requested_home" ;;
+    esac
+  environment:
+    aur_requested_home: "{{(aur_user is mapping) | ternary(aur_user.home, '')}}"
+    aur_user_name: "{{(aur_user is mapping) | ternary(aur_user.name, aur_user)}}"
+  register: requestedHome
   changed_when: false
 
-- name: AUR → proceed with installation
+- name: AUR → run AUR tasks
   block:
-    - name: AUR → installation
-      include_tasks: install.yml
-      vars:
-        pkg_name: "{{(item is mapping) | ternary(item.pkg, item)}}"
-        pre_cmd: "{{(item is mapping) | ternary(item.pre, '')}}"
-      with_items: "{{packages}}"
-  always:
-    - name: AUR → remove base-devel and dependencies
-      shell: |
-        pacman -Rns --noconfirm --noprogressbar $(pacman -Qtdqg base-devel) || true
+
+    - name: AUR → see effective HOME
+      debug:
+        var: requestedHome
+      changed_when: false
+
+    - name: AUR → base-devel needed while building
+      become: false
+      command: |
+        pacman -S --noconfirm --noprogressbar --asdeps --needed base-devel
+      changed_when: false
+
+    - name: AUR → proceed with installation
+      block:
+        - name: AUR → installation
+          include_tasks: install.yml
+          vars:
+            aur_name: "{{(aur_user is mapping) | ternary(aur_user.name, aur_user)}}"
+            aur_home: "{{requestedHome.stdout}}"
+            pkg_name: "{{(item is mapping) | ternary(item.pkg, item)}}"
+            pre_cmd: "{{(item is mapping) | ternary(item.pre, '')}}"
+          with_items: "{{packages}}"
+      always:
+        - name: AUR → remove base-devel and dependencies
+          shell: |
+            pacman -Rns --noconfirm --noprogressbar base-devel || true
+          changed_when: false
+
+  always:
+    - name: AUR → remove temporary HOME
+      file:
+        path: "{{requestedHome.stdout}}"
+        state: absent
+      when:
+        - (aur_user is mapping)
+        - (aur_user.home == '!mktemp')
       changed_when: false
diff --git a/roles/cleanupdate/meta.OK/main.yml b/roles/cleanupdate/meta.OK/main.yml
index a03553a..8a1f183 100644
--- a/roles/cleanupdate/meta.OK/main.yml
+++ b/roles/cleanupdate/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/cleanupdate/tasks/main.yml b/roles/cleanupdate/tasks/main.yml
index 7e03e5b..51c1c6a 100644
--- a/roles/cleanupdate/tasks/main.yml
+++ b/roles/cleanupdate/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/ddclient.inc/meta.OK/main.yml b/roles/ddclient.inc/meta.OK/main.yml
index 511dd25..69e59c7 100644
--- a/roles/ddclient.inc/meta.OK/main.yml
+++ b/roles/ddclient.inc/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/ddclient.inc/tasks/main.yml b/roles/ddclient.inc/tasks/main.yml
index 1d0240a..9fcbce0 100644
--- a/roles/ddclient.inc/tasks/main.yml
+++ b/roles/ddclient.inc/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/ddclient_FreeDNS_example/handlers/main.yml b/roles/ddclient_FreeDNS_example/handlers/main.yml
index d34a94a..f91d36a 100644
--- a/roles/ddclient_FreeDNS_example/handlers/main.yml
+++ b/roles/ddclient_FreeDNS_example/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart ddclient@fdns.service
diff --git a/roles/ddclient_FreeDNS_example/meta.OK/main.yml b/roles/ddclient_FreeDNS_example/meta.OK/main.yml
index a03553a..8a1f183 100644
--- a/roles/ddclient_FreeDNS_example/meta.OK/main.yml
+++ b/roles/ddclient_FreeDNS_example/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/ddclient_FreeDNS_example/tasks/main.yml b/roles/ddclient_FreeDNS_example/tasks/main.yml
index 77ae82b..c3ee653 100644
--- a/roles/ddclient_FreeDNS_example/tasks/main.yml
+++ b/roles/ddclient_FreeDNS_example/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: initialize the ddclient software
diff --git a/roles/ddclient_HE_example/handlers/main.yml b/roles/ddclient_HE_example/handlers/main.yml
index 19a00b1..83ad548 100644
--- a/roles/ddclient_HE_example/handlers/main.yml
+++ b/roles/ddclient_HE_example/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart ddclient@henet.service
diff --git a/roles/ddclient_HE_example/meta.OK/main.yml b/roles/ddclient_HE_example/meta.OK/main.yml
index f5b99db..33b9a1e 100644
--- a/roles/ddclient_HE_example/meta.OK/main.yml
+++ b/roles/ddclient_HE_example/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/ddclient_HE_example/tasks/main.yml b/roles/ddclient_HE_example/tasks/main.yml
index 485de4e..68a6261 100644
--- a/roles/ddclient_HE_example/tasks/main.yml
+++ b/roles/ddclient_HE_example/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: initialize the ddclient software
diff --git a/roles/dmz_dotclear_front/handlers/main.yml b/roles/dmz_dotclear_front/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/dmz_dotclear_front/handlers/main.yml
+++ b/roles/dmz_dotclear_front/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/dmz_dotclear_front/meta.OK/main.yml b/roles/dmz_dotclear_front/meta.OK/main.yml
index 7f3de13..8e93caa 100644
--- a/roles/dmz_dotclear_front/meta.OK/main.yml
+++ b/roles/dmz_dotclear_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_dotclear_front/tasks/main.yml b/roles/dmz_dotclear_front/tasks/main.yml
index 0fb982b..c91b3ae 100644
--- a/roles/dmz_dotclear_front/tasks/main.yml
+++ b/roles/dmz_dotclear_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: make sure the path to dotclear exists
@@ -13,7 +13,7 @@
   get_url:
     url: 'http://download.dotclear.org/latest.tar.gz'
     dest: /tmp/
-  connection: local
+  delegate_to: localhost
   register: targz
   changed_when: false
 
diff --git a/roles/dmz_dotclear_front/templates/config.php.j2 b/roles/dmz_dotclear_front/templates/config.php.j2
index 484003c..63e926d 100644
--- a/roles/dmz_dotclear_front/templates/config.php.j2
+++ b/roles/dmz_dotclear_front/templates/config.php.j2
@@ -1,6 +1,6 @@
 <?php
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 if (!defined('DC_RC_PATH')) { return; }
diff --git a/roles/dmz_dotclear_front/templates/ldap_auth.php.j2 b/roles/dmz_dotclear_front/templates/ldap_auth.php.j2
index 797ae85..9d30ae7 100644
--- a/roles/dmz_dotclear_front/templates/ldap_auth.php.j2
+++ b/roles/dmz_dotclear_front/templates/ldap_auth.php.j2
@@ -1,6 +1,6 @@
 <?php
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # https://fr.dotclear.org/documentation/2.0/resources/authentication
diff --git a/roles/dmz_exim/handlers/main.yml b/roles/dmz_exim/handlers/main.yml
index 18d1fa1..4af6552 100644
--- a/roles/dmz_exim/handlers/main.yml
+++ b/roles/dmz_exim/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart spamassassin-update.timer
diff --git a/roles/dmz_exim/meta.OK/main.yml b/roles/dmz_exim/meta.OK/main.yml
index e7dc7df..e54a4c5 100644
--- a/roles/dmz_exim/meta.OK/main.yml
+++ b/roles/dmz_exim/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_exim/tasks/main.yml b/roles/dmz_exim/tasks/main.yml
index db01377..5ece871 100644
--- a/roles/dmz_exim/tasks/main.yml
+++ b/roles/dmz_exim/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -498,10 +498,9 @@
     marker: '  # {mark} LMTP transport'
     block: |
       lmtp_transport:
-        driver = smtp
-        protocol = lmtp
-        rcpt_include_affixes
-        port = 24
+        driver = lmtp
+        socket = /run/shared_sockets/lmtp
+        timeout = 1m
     insertbefore: '^# This transport is used'
   notify:
     - restart exim.service
diff --git a/roles/dmz_haproxy/handlers/main.yml b/roles/dmz_haproxy/handlers/main.yml
index 485fd41..8707fd4 100644
--- a/roles/dmz_haproxy/handlers/main.yml
+++ b/roles/dmz_haproxy/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart haproxy.service
diff --git a/roles/dmz_haproxy/meta.OK/main.yml b/roles/dmz_haproxy/meta.OK/main.yml
index 320bb95..3c72862 100644
--- a/roles/dmz_haproxy/meta.OK/main.yml
+++ b/roles/dmz_haproxy/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_haproxy/tasks/main.yml b/roles/dmz_haproxy/tasks/main.yml
index a8f7324..2c0bf79 100644
--- a/roles/dmz_haproxy/tasks/main.yml
+++ b/roles/dmz_haproxy/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/dmz_haproxy/templates/haproxy.conf.j2 b/roles/dmz_haproxy/templates/haproxy.conf.j2
index bd4fc18..a3b5da3 100644
--- a/roles/dmz_haproxy/templates/haproxy.conf.j2
+++ b/roles/dmz_haproxy/templates/haproxy.conf.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 global
diff --git a/roles/dmz_ihmgit_front/handlers/main.yml b/roles/dmz_ihmgit_front/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/dmz_ihmgit_front/handlers/main.yml
+++ b/roles/dmz_ihmgit_front/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/dmz_ihmgit_front/meta.OK/main.yml b/roles/dmz_ihmgit_front/meta.OK/main.yml
index 7f3de13..8e93caa 100644
--- a/roles/dmz_ihmgit_front/meta.OK/main.yml
+++ b/roles/dmz_ihmgit_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_ihmgit_front/tasks/main.yml b/roles/dmz_ihmgit_front/tasks/main.yml
index be88e09..84c7128 100644
--- a/roles/dmz_ihmgit_front/tasks/main.yml
+++ b/roles/dmz_ihmgit_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: configure nginx for Gitea
diff --git a/roles/dmz_ihmldap/handlers/main.yml b/roles/dmz_ihmldap/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/dmz_ihmldap/handlers/main.yml
+++ b/roles/dmz_ihmldap/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/dmz_ihmldap/meta.OK/main.yml b/roles/dmz_ihmldap/meta.OK/main.yml
index 0eecb09..74bcbb6 100644
--- a/roles/dmz_ihmldap/meta.OK/main.yml
+++ b/roles/dmz_ihmldap/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_ihmldap/tasks/main.yml b/roles/dmz_ihmldap/tasks/main.yml
index a56c73e..7f9f7df 100644
--- a/roles/dmz_ihmldap/tasks/main.yml
+++ b/roles/dmz_ihmldap/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/dmz_motion_front/handlers/main.yml b/roles/dmz_motion_front/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/dmz_motion_front/handlers/main.yml
+++ b/roles/dmz_motion_front/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/dmz_motion_front/meta.OK/main.yml b/roles/dmz_motion_front/meta.OK/main.yml
index 7f3de13..8e93caa 100644
--- a/roles/dmz_motion_front/meta.OK/main.yml
+++ b/roles/dmz_motion_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_motion_front/tasks/main.yml b/roles/dmz_motion_front/tasks/main.yml
index 26de783..80eb6c5 100644
--- a/roles/dmz_motion_front/tasks/main.yml
+++ b/roles/dmz_motion_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: create a directory for the Motion web page
diff --git a/roles/dmz_movim_front/handlers/main.yml b/roles/dmz_movim_front/handlers/main.yml
index 5f86405..da28957 100644
--- a/roles/dmz_movim_front/handlers/main.yml
+++ b/roles/dmz_movim_front/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart movim.service
diff --git a/roles/dmz_movim_front/meta.OK/main.yml b/roles/dmz_movim_front/meta.OK/main.yml
index 432cb9a..39eca7b 100644
--- a/roles/dmz_movim_front/meta.OK/main.yml
+++ b/roles/dmz_movim_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_movim_front/tasks/main.yml b/roles/dmz_movim_front/tasks/main.yml
index a457883..1cbdc10 100644
--- a/roles/dmz_movim_front/tasks/main.yml
+++ b/roles/dmz_movim_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/dmz_nextcloud_front/handlers/main.yml b/roles/dmz_nextcloud_front/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/dmz_nextcloud_front/handlers/main.yml
+++ b/roles/dmz_nextcloud_front/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/dmz_nextcloud_front/meta.OK/main.yml b/roles/dmz_nextcloud_front/meta.OK/main.yml
index 7f3de13..8e93caa 100644
--- a/roles/dmz_nextcloud_front/meta.OK/main.yml
+++ b/roles/dmz_nextcloud_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_nextcloud_front/tasks/main.yml b/roles/dmz_nextcloud_front/tasks/main.yml
index ead832b..2f0945e 100644
--- a/roles/dmz_nextcloud_front/tasks/main.yml
+++ b/roles/dmz_nextcloud_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: configure Nginx for Nextcloud
diff --git a/roles/dmz_nextcloud_front/templates/nginx_lool.j2 b/roles/dmz_nextcloud_front/templates/nginx_lool.j2
index 844d022..9ad9c75 100644
--- a/roles/dmz_nextcloud_front/templates/nginx_lool.j2
+++ b/roles/dmz_nextcloud_front/templates/nginx_lool.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # Nextcloud BUG
diff --git a/roles/dmz_nextcloud_front/templates/nginx_nextcloud.j2 b/roles/dmz_nextcloud_front/templates/nginx_nextcloud.j2
index 9b9bc19..6d14a4f 100644
--- a/roles/dmz_nextcloud_front/templates/nginx_nextcloud.j2
+++ b/roles/dmz_nextcloud_front/templates/nginx_nextcloud.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # https://docs.nextcloud.com/server/12/admin_manual/installation/nginx.html
diff --git a/roles/dmz_nginx/handlers/main.yml b/roles/dmz_nginx/handlers/main.yml
index b5bf863..10ee9cb 100644
--- a/roles/dmz_nginx/handlers/main.yml
+++ b/roles/dmz_nginx/handlers/main.yml
@@ -1,10 +1,10 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: create tmpfiles
-  command: systemd-tmpfiles --create
+  command: systemd-tmpfiles --create /etc/tmpfiles.d/run_http.conf
 
 - name: restart nginx.service
   systemd:
diff --git a/roles/dmz_nginx/meta.OK/main.yml b/roles/dmz_nginx/meta.OK/main.yml
index d06af62..3749930 100644
--- a/roles/dmz_nginx/meta.OK/main.yml
+++ b/roles/dmz_nginx/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_nginx/tasks/main.yml b/roles/dmz_nginx/tasks/main.yml
index 9210ed4..6663f90 100644
--- a/roles/dmz_nginx/tasks/main.yml
+++ b/roles/dmz_nginx/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -10,13 +10,13 @@
     msg: nginx
 ### ⇐ UPSTREAM BEGIN ###
 
-- name: install software
-  package:
-    name: "{{item}}"
-    state: present
-  with_items:
+#- name: install software
+#  package:
+#    name: "{{item}}"
+#    state: present
+#  with_items:
 #    - nginx-mainline # nginx-mainline must now be built from official PKGBUILD :-(
-    - php-fpm
+#    - php-fpm
 
 ### UPSTREAM END ⇒ ###
 - name: merge upstream
@@ -226,7 +226,7 @@
     - user
     - group
     - 'listen.group'
-  
+
 - name: set the PID file path for php-fpm
   lineinfile:
     path: /etc/php/php-fpm.conf
diff --git a/roles/dmz_nginx/templates/00.http.inc.j2 b/roles/dmz_nginx/templates/00.http.inc.j2
index 08211fc..9be2e2d 100644
--- a/roles/dmz_nginx/templates/00.http.inc.j2
+++ b/roles/dmz_nginx/templates/00.http.inc.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 location / {
diff --git a/roles/dmz_nginx/templates/10.conf.j2 b/roles/dmz_nginx/templates/10.conf.j2
index e539224..557a407 100644
--- a/roles/dmz_nginx/templates/10.conf.j2
+++ b/roles/dmz_nginx/templates/10.conf.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 client_max_body_size {{http_max_upload}};
diff --git a/roles/dmz_nginx/templates/filters.inc.j2 b/roles/dmz_nginx/templates/filters.inc.j2
index aa61c53..f54b28c 100644
--- a/roles/dmz_nginx/templates/filters.inc.j2
+++ b/roles/dmz_nginx/templates/filters.inc.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 location ~ (?i)(?<!{{http_pfx_dotclear}}/)admin|(?<!{{http_pfx_lam}}/templates/)login|(?<!{{http_pfx_dotclear}}/admin/)auth(?!or) {
diff --git a/roles/dmz_nginx/templates/php-fast.inc.j2 b/roles/dmz_nginx/templates/php-fast.inc.j2
index 82dc4fa..842aaf6 100644
--- a/roles/dmz_nginx/templates/php-fast.inc.j2
+++ b/roles/dmz_nginx/templates/php-fast.inc.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # http://wiki.nginx.org/Pitfalls#Passing_Uncontrolled_Requests_to_PHP
diff --git a/roles/dmz_nginx/templates/php-full.inc.j2 b/roles/dmz_nginx/templates/php-full.inc.j2
index 4c1e399..97478fb 100644
--- a/roles/dmz_nginx/templates/php-full.inc.j2
+++ b/roles/dmz_nginx/templates/php-full.inc.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # function /php...(doc_root /... prefix /... script /... pathinfo) {
diff --git a/roles/dmz_prosody_front/handlers/main.yml b/roles/dmz_prosody_front/handlers/main.yml
index 904177f..892ccd5 100644
--- a/roles/dmz_prosody_front/handlers/main.yml
+++ b/roles/dmz_prosody_front/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart prosody.service
diff --git a/roles/dmz_prosody_front/meta.OK/main.yml b/roles/dmz_prosody_front/meta.OK/main.yml
index ef74b53..b0131bf 100644
--- a/roles/dmz_prosody_front/meta.OK/main.yml
+++ b/roles/dmz_prosody_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_prosody_front/tasks/main.yml b/roles/dmz_prosody_front/tasks/main.yml
index aa7af2d..54a07ae 100644
--- a/roles/dmz_prosody_front/tasks/main.yml
+++ b/roles/dmz_prosody_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/dmz_prosody_front/templates/xep0363_http_upload.php.j2 b/roles/dmz_prosody_front/templates/xep0363_http_upload.php.j2
index 53ecc8d..0bd007e 100644
--- a/roles/dmz_prosody_front/templates/xep0363_http_upload.php.j2
+++ b/roles/dmz_prosody_front/templates/xep0363_http_upload.php.j2
@@ -1,6 +1,6 @@
 <?php
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 /*
diff --git a/roles/dmz_wallabag_front/handlers/main.yml b/roles/dmz_wallabag_front/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/dmz_wallabag_front/handlers/main.yml
+++ b/roles/dmz_wallabag_front/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/dmz_wallabag_front/meta.OK/main.yml b/roles/dmz_wallabag_front/meta.OK/main.yml
index d65c8b6..0415591 100644
--- a/roles/dmz_wallabag_front/meta.OK/main.yml
+++ b/roles/dmz_wallabag_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dmz_wallabag_front/tasks/main.yml b/roles/dmz_wallabag_front/tasks/main.yml
index 92ed44b..0b6a289 100644
--- a/roles/dmz_wallabag_front/tasks/main.yml
+++ b/roles/dmz_wallabag_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/dotclear_back/meta.OK/main.yml b/roles/dotclear_back/meta.OK/main.yml
index 5d48b7c..ff9a1ac 100644
--- a/roles/dotclear_back/meta.OK/main.yml
+++ b/roles/dotclear_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dotclear_back/tasks/main.yml b/roles/dotclear_back/tasks/main.yml
index df5da44..f705286 100644
--- a/roles/dotclear_back/tasks/main.yml
+++ b/roles/dotclear_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: PostgreSQL user for dotClear
diff --git a/roles/dovecot/handlers/main.yml b/roles/dovecot/handlers/main.yml
index 63726b5..7033e1c 100644
--- a/roles/dovecot/handlers/main.yml
+++ b/roles/dovecot/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart dovecot.service
diff --git a/roles/dovecot/meta.OK/main.yml b/roles/dovecot/meta.OK/main.yml
index 93cf1c9..542be5d 100644
--- a/roles/dovecot/meta.OK/main.yml
+++ b/roles/dovecot/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/dovecot/tasks/main.yml b/roles/dovecot/tasks/main.yml
index 0b5709b..e73c423 100644
--- a/roles/dovecot/tasks/main.yml
+++ b/roles/dovecot/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/dovecot/templates/dovecot-ldap-passdb.conf.j2 b/roles/dovecot/templates/dovecot-ldap-passdb.conf.j2
index 46aad22..494ac71 100644
--- a/roles/dovecot/templates/dovecot-ldap-passdb.conf.j2
+++ b/roles/dovecot/templates/dovecot-ldap-passdb.conf.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # This file is opened as root, so it should be owned by root and mode 0600.
diff --git a/roles/dovecot/templates/dovecot.conf.j2 b/roles/dovecot/templates/dovecot.conf.j2
index c92ff10..63a9738 100644
--- a/roles/dovecot/templates/dovecot.conf.j2
+++ b/roles/dovecot/templates/dovecot.conf.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ## Dovecot configuration file (/usr/share/doc/dovecot/example-config)
@@ -51,15 +51,15 @@ service imap-login {
   }
 }
 service lmtp {
-  #unix_listener /run/shared_sockets/lmtp {
-  #  mode = 0666
-  #}
+  unix_listener /run/shared_sockets/lmtp {
+    mode = 0666
+  }
   # Create inet listener only if you can't use the above UNIX socket
   # https://yalis.fr/git/yves/home-server/issues/6
-  inet_listener lmtp {
-    address = {{SafeZone_IP}}
-    port = 24
-  }
+  #inet_listener lmtp {
+  #  address = {{SafeZone_IP}}
+  #  port = 24
+  #}
 }
 service imap {
 }
@@ -75,8 +75,8 @@ service auth-worker {
 #  # For example: mode=0660, group=vmail and global mail_access_groups=vmail
 #  unix_listener dict {
 #    #mode = 0600
-#    #user = 
-#    #group = 
+#    #user =
+#    #group =
 #  }
 #}
 
diff --git a/roles/etckeeper.inc/tasks/init.yml b/roles/etckeeper.inc/tasks/init.yml
index 6f141a6..be1ab16 100644
--- a/roles/etckeeper.inc/tasks/init.yml
+++ b/roles/etckeeper.inc/tasks/init.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: install etckeeper
diff --git a/roles/etckeeper.inc/tasks/local.yml b/roles/etckeeper.inc/tasks/local.yml
index c396d8e..a207698 100644
--- a/roles/etckeeper.inc/tasks/local.yml
+++ b/roles/etckeeper.inc/tasks/local.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: store /etc changes
diff --git a/roles/etckeeper.inc/tasks/merge.yml b/roles/etckeeper.inc/tasks/merge.yml
index 6c08fab..463a1d9 100644
--- a/roles/etckeeper.inc/tasks/merge.yml
+++ b/roles/etckeeper.inc/tasks/merge.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: switch Git to run
diff --git a/roles/etckeeper.inc/tasks/upstream.yml b/roles/etckeeper.inc/tasks/upstream.yml
index 994775a..2ffa827 100644
--- a/roles/etckeeper.inc/tasks/upstream.yml
+++ b/roles/etckeeper.inc/tasks/upstream.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: switch Git to master
diff --git a/roles/front/files/DMZ.nspawn b/roles/front/files/DMZ.nspawn
index 0866ebe..309ac14 100644
--- a/roles/front/files/DMZ.nspawn
+++ b/roles/front/files/DMZ.nspawn
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 [Exec]
diff --git a/roles/front/files/nspawn_override.conf b/roles/front/files/nspawn_override.conf
index 4aa77b1..4235b6f 100644
--- a/roles/front/files/nspawn_override.conf
+++ b/roles/front/files/nspawn_override.conf
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 [Unit]
diff --git a/roles/front/meta.OK/main.yml b/roles/front/meta.OK/main.yml
index 51a597b..a4b5e6a 100644
--- a/roles/front/meta.OK/main.yml
+++ b/roles/front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/front/tasks/main.yml b/roles/front/tasks/main.yml
index 76daee4..91be220 100644
--- a/roles/front/tasks/main.yml
+++ b/roles/front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -40,10 +40,10 @@
   shell: >
     pacstrap -c -d {{front_dir}}
     $(
-    pacman -Qg base
-    | grep -vE
-    ' (bzip2|dhcpcd|gzip|licenses|linux|lvm2|mdadm|pciutils|reiserfsprogs|systemd-sysvcompat|texinfo|usbutils|xfsprogs)$'
-    | cut -d' ' -f2
+    LANG=C pacman -Si base
+    | sed -nr 's/^Depends[^:]*: *//;t ok;b;: ok;s/ +/\n/g;p;q'
+    | grep -vxE
+    'bzip2|dhcpcd|gzip|licenses|linux|lvm2|mdadm|pciutils|reiserfsprogs|systemd-sysvcompat|texinfo|usbutils|xfsprogs'
     )
     busybox openssh python etckeeper
   args:
@@ -55,6 +55,8 @@
     arch-chroot {{front_dir}} /usr/bin/busybox --install
   args:
     creates: "{{front_dir}}/usr/bin/ash"
+  when:
+    - (arch.changed)
 
 - name: … but not for some binaries
   file:
diff --git a/roles/front/templates/DMZ.j2 b/roles/front/templates/DMZ.j2
index 5399a67..8e99081 100644
--- a/roles/front/templates/DMZ.j2
+++ b/roles/front/templates/DMZ.j2
@@ -2,7 +2,7 @@
 # $1: bash script; $2…: arguments (bash -c "…script…" 'bash' …arguments…)
 #
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 cmd="$1"; shift
diff --git a/roles/front/vars/main.yml b/roles/front/vars/main.yml
index 2d51058..d42223c 100644
--- a/roles/front/vars/main.yml
+++ b/roles/front/vars/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 front_dir: /var/lib/machines/{{DMZ}}
diff --git a/roles/front_run/handlers/main.yml b/roles/front_run/handlers/main.yml
index 53f0a33..6f6dc51 100644
--- a/roles/front_run/handlers/main.yml
+++ b/roles/front_run/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart DMZ
diff --git a/roles/front_run/meta.OK/main.yml b/roles/front_run/meta.OK/main.yml
index 5bed625..c4c3990 100644
--- a/roles/front_run/meta.OK/main.yml
+++ b/roles/front_run/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/front_run/tasks/main.yml b/roles/front_run/tasks/main.yml
index 6b6c45d..4d350ff 100644
--- a/roles/front_run/tasks/main.yml
+++ b/roles/front_run/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: start systemd-nspawn@{{DMZ}}.service
diff --git a/roles/ihmgit_back/handlers/main.yml b/roles/ihmgit_back/handlers/main.yml
index 23f4a10..0d65f74 100644
--- a/roles/ihmgit_back/handlers/main.yml
+++ b/roles/ihmgit_back/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart gitea.service
diff --git a/roles/ihmgit_back/meta.OK/main.yml b/roles/ihmgit_back/meta.OK/main.yml
index 22c0d48..787287e 100644
--- a/roles/ihmgit_back/meta.OK/main.yml
+++ b/roles/ihmgit_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/ihmgit_back/tasks/main.yml b/roles/ihmgit_back/tasks/main.yml
index 35273f9..b09e35a 100644
--- a/roles/ihmgit_back/tasks/main.yml
+++ b/roles/ihmgit_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -44,7 +44,7 @@
 - name: create Gitea configuration file
   file:
     path: /etc/gitea/app.ini
-    state: file
+    state: touch
 
 - name: make sure the Gitea user owns its work-directories
   file:
diff --git a/roles/init/files/bin/.etc_checkroot.inc b/roles/init/files/bin/.etc_checkroot.inc
index 1bc3ad7..eb17ac4 100644
--- a/roles/init/files/bin/.etc_checkroot.inc
+++ b/roles/init/files/bin/.etc_checkroot.inc
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 if [ ${0:0:1} == / ]; then
diff --git a/roles/init/files/bin/etc_start_upstream b/roles/init/files/bin/etc_start_upstream
index 4505202..ce00793 100644
--- a/roles/init/files/bin/etc_start_upstream
+++ b/roles/init/files/bin/etc_start_upstream
@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 . "$(dirname "$0")/.etc_checkroot.inc"
diff --git a/roles/init/files/bin/etc_stop_local b/roles/init/files/bin/etc_stop_local
index 8945cfb..35fa768 100644
--- a/roles/init/files/bin/etc_stop_local
+++ b/roles/init/files/bin/etc_stop_local
@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 . "$(dirname "$0")/.etc_checkroot.inc"
diff --git a/roles/init/files/bin/etc_stop_upstream b/roles/init/files/bin/etc_stop_upstream
index f635fcf..2b55dac 100644
--- a/roles/init/files/bin/etc_stop_upstream
+++ b/roles/init/files/bin/etc_stop_upstream
@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 . "$(dirname "$0")/.etc_checkroot.inc"
diff --git a/roles/init/tasks/main.yml b/roles/init/tasks/main.yml
index 0e8cd7e..0686230 100644
--- a/roles/init/tasks/main.yml
+++ b/roles/init/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # WARNING: This file may be used inside a mounted chroot.
diff --git a/roles/init/templates/etc_init.j2 b/roles/init/templates/etc_init.j2
index 9befdd1..b4a1d5e 100644
--- a/roles/init/templates/etc_init.j2
+++ b/roles/init/templates/etc_init.j2
@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 . "$(dirname "$0")/.etc_checkroot.inc"
diff --git a/roles/iodine/handlers/main.yml b/roles/iodine/handlers/main.yml
index 4a245e9..04eab19 100644
--- a/roles/iodine/handlers/main.yml
+++ b/roles/iodine/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart iodined.service
diff --git a/roles/iodine/meta.OK/main.yml b/roles/iodine/meta.OK/main.yml
index 511dd25..69e59c7 100644
--- a/roles/iodine/meta.OK/main.yml
+++ b/roles/iodine/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/iodine/tasks/main.yml b/roles/iodine/tasks/main.yml
index 07e1ed9..c6aebac 100644
--- a/roles/iodine/tasks/main.yml
+++ b/roles/iodine/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/ldap/handlers/main.yml b/roles/ldap/handlers/main.yml
index 6f8e600..f11d77d 100644
--- a/roles/ldap/handlers/main.yml
+++ b/roles/ldap/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nslcd.service
diff --git a/roles/ldap/meta.OK/main.yml b/roles/ldap/meta.OK/main.yml
index 3cbf8f1..9f62fc5 100644
--- a/roles/ldap/meta.OK/main.yml
+++ b/roles/ldap/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/ldap/tasks/main.yml b/roles/ldap/tasks/main.yml
index 8d81418..e5672d4 100644
--- a/roles/ldap/tasks/main.yml
+++ b/roles/ldap/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/mediaplayer/handlers/main.yml b/roles/mediaplayer/handlers/main.yml
index f5b8c14..91a7137 100644
--- a/roles/mediaplayer/handlers/main.yml
+++ b/roles/mediaplayer/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: enforce max_user_watches limit
diff --git a/roles/mediaplayer/meta.OK/main.yml b/roles/mediaplayer/meta.OK/main.yml
index 0c2f272..3596e66 100644
--- a/roles/mediaplayer/meta.OK/main.yml
+++ b/roles/mediaplayer/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/mediaplayer/tasks/main.yml b/roles/mediaplayer/tasks/main.yml
index 0c826b5..91c14ef 100644
--- a/roles/mediaplayer/tasks/main.yml
+++ b/roles/mediaplayer/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -43,8 +43,8 @@
   file:
     path: /var/lib/minidlna
     state: directory
-    owner: minidlna
-    group: minidlna
+    owner: "{{kodi_user}}"
+    group: "{{media_group}}"
 
 - name: disable the default media_dir
   lineinfile:
diff --git a/roles/motion_back/handlers/main.yml b/roles/motion_back/handlers/main.yml
index a92a1dc..58bd302 100644
--- a/roles/motion_back/handlers/main.yml
+++ b/roles/motion_back/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart motion.service
diff --git a/roles/motion_back/meta.OK/main.yml b/roles/motion_back/meta.OK/main.yml
index 38034be..2047a8f 100644
--- a/roles/motion_back/meta.OK/main.yml
+++ b/roles/motion_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/motion_back/tasks/main.yml b/roles/motion_back/tasks/main.yml
index 900caf8..8102407 100644
--- a/roles/motion_back/tasks/main.yml
+++ b/roles/motion_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/movim_back/meta.OK/main.yml b/roles/movim_back/meta.OK/main.yml
index 5d48b7c..ff9a1ac 100644
--- a/roles/movim_back/meta.OK/main.yml
+++ b/roles/movim_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/movim_back/tasks/main.yml b/roles/movim_back/tasks/main.yml
index 2ebe5b8..195758a 100644
--- a/roles/movim_back/tasks/main.yml
+++ b/roles/movim_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: PostgreSQL user for movim
diff --git a/roles/msmtp/meta.OK/main.yml b/roles/msmtp/meta.OK/main.yml
index 511dd25..69e59c7 100644
--- a/roles/msmtp/meta.OK/main.yml
+++ b/roles/msmtp/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/msmtp/tasks/main.yml b/roles/msmtp/tasks/main.yml
index f846d1d..523b9ac 100644
--- a/roles/msmtp/tasks/main.yml
+++ b/roles/msmtp/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/nextcloud_back/handlers/main.yml b/roles/nextcloud_back/handlers/main.yml
index 4da8e85..b7d2163 100644
--- a/roles/nextcloud_back/handlers/main.yml
+++ b/roles/nextcloud_back/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart coolwsd.service
diff --git a/roles/nextcloud_back/meta.OK/main.yml b/roles/nextcloud_back/meta.OK/main.yml
index cdbd3cc..be7fa19 100644
--- a/roles/nextcloud_back/meta.OK/main.yml
+++ b/roles/nextcloud_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/nextcloud_back/tasks/main.yml b/roles/nextcloud_back/tasks/main.yml
index 9cf0515..e7fd041 100644
--- a/roles/nextcloud_back/tasks/main.yml
+++ b/roles/nextcloud_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -21,19 +21,19 @@
     - nextcloud
     - ffmpeg
 
-- name: install AUR software
-  include_role:
-    name: aur.inc
-    allow_duplicates: true
-  vars:
-    packages:
-      - pkg: collabora-online-server-nodocker
-        pre: |
-          LANG=C sed -ri '
-            s/^(_I18N_EREGEX=).*$/\1{{loolwsd_lang}}/
-          ' PKGBUILD
-          cat PKGBUILD
-    aur_user: git
+#COLLABORA#- name: install AUR software
+#COLLABORA#  include_role:
+#COLLABORA#    name: aur.inc
+#COLLABORA#    allow_duplicates: true
+#COLLABORA#  vars:
+#COLLABORA#    packages:
+#COLLABORA#      - pkg: collabora-online-server-nodocker
+#COLLABORA#        pre: |
+#COLLABORA#          LANG=C sed -ri '
+#COLLABORA#            s/^(_I18N_EREGEX=).*$/\1{{loolwsd_lang}}/
+#COLLABORA#          ' PKGBUILD
+#COLLABORA#          cat PKGBUILD
+#COLLABORA#    aur_user: git
 
 - name: create the nextcloud user
   user:
@@ -85,36 +85,36 @@
 #  notify:
 #    - restart coolwsd.service
 
-- name: change some coolwsd settings
-  lineinfile:
-    path: /etc/coolwsd/coolwsd.xml
-    owner: cool
-    group: cool
-    backrefs: true
-    regexp: '^(.*<{{item.key}}\s[^>]*>)[^<]*(<.*)$'
-    line: '\g<1>{{item.value}}\2'
-  with_dict:
-    server_name: '{{net_soa}}:443'
-    memproportion: '{{loolwsd_maxmem_asdouble}}'
-    'enable\s[^>]*SSL[^>]*between coolwsd and the network': 'false'
-    termination: 'true'
-    'as_scheme\s[^>]*SSL': 'false'
-    'enable\s[^>]*SSL[^>]*between storage and coolwsd': 'false'
-    username: '{{loolwsd_admin_user}}'
-    password: '{{loolwsd_admin_password}}'
-  notify:
-    - restart coolwsd.service
-
-- name: allow Nextcloud to connect to coolwsd
-  lineinfile:
-    path: /etc/coolwsd/coolwsd.xml
-    owner: cool
-    group: cool
-    regexp: '<host\s.*{{net_soa | replace(".", "\\.")}}'
-    line: '            <host desc="Regex pattern of hostname to allow or deny." allow="true">(?:.*\.)?{{net_soa | replace(".", "\.")}}</host>'
-    insertafter: '<wopi desc="Allow/deny wopi storage.'
-  notify:
-    - restart coolwsd.service
+#COLLABORA#- name: change some coolwsd settings
+#COLLABORA#  lineinfile:
+#COLLABORA#    path: /etc/coolwsd/coolwsd.xml
+#COLLABORA#    owner: cool
+#COLLABORA#    group: cool
+#COLLABORA#    backrefs: true
+#COLLABORA#    regexp: '^(.*<{{item.key}}\s[^>]*>)[^<]*(<.*)$'
+#COLLABORA#    line: '\g<1>{{item.value}}\2'
+#COLLABORA#  with_dict:
+#COLLABORA#    server_name: '{{net_soa}}:443'
+#COLLABORA#    memproportion: '{{loolwsd_maxmem_asdouble}}'
+#COLLABORA#    'enable\s[^>]*SSL[^>]*between coolwsd and the network': 'false'
+#COLLABORA#    termination: 'true'
+#COLLABORA#    'as_scheme\s[^>]*SSL': 'false'
+#COLLABORA#    'enable\s[^>]*SSL[^>]*between storage and coolwsd': 'false'
+#COLLABORA#    username: '{{loolwsd_admin_user}}'
+#COLLABORA#    password: '{{loolwsd_admin_password}}'
+#COLLABORA#  notify:
+#COLLABORA#    - restart coolwsd.service
+#COLLABORA#
+#COLLABORA#- name: allow Nextcloud to connect to coolwsd
+#COLLABORA#  lineinfile:
+#COLLABORA#    path: /etc/coolwsd/coolwsd.xml
+#COLLABORA#    owner: cool
+#COLLABORA#    group: cool
+#COLLABORA#    regexp: '<host\s.*{{net_soa | replace(".", "\\.")}}'
+#COLLABORA#    line: '            <host desc="Regex pattern of hostname to allow or deny." allow="true">(?:.*\.)?{{net_soa | replace(".", "\.")}}</host>'
+#COLLABORA#    insertafter: '<wopi desc="Allow/deny wopi storage.'
+#COLLABORA#  notify:
+#COLLABORA#    - restart coolwsd.service
 
 - name: ensure Nextcloud ownership
   block:
@@ -145,7 +145,7 @@
       changed_when: false
 
 - name: ensure Nextcloud ownership — apply
-  command: systemd-tmpfiles --create
+  command: systemd-tmpfiles --create /etc/tmpfiles.d/nextcloud.conf
   changed_when: false
 
 - name: send initial configuration
@@ -481,11 +481,11 @@
     - (check_nextcloud_installed.stdout is defined)
     - (check_nextcloud_installed.stdout != '')
 
-- name: enable coolwsd.service
-  systemd:
-    daemon_reload: true
-    name: coolwsd.service
-    enabled: true
+#COLLABORA#- name: enable coolwsd.service
+#COLLABORA#  systemd:
+#COLLABORA#    daemon_reload: true
+#COLLABORA#    name: coolwsd.service
+#COLLABORA#    enabled: true
 
 - name: enable Nextcloud
   systemd:
diff --git a/roles/nextcloud_back/templates/nextcloud.ini.j2 b/roles/nextcloud_back/templates/nextcloud.ini.j2
index a934a3f..4c86846 100644
--- a/roles/nextcloud_back/templates/nextcloud.ini.j2
+++ b/roles/nextcloud_back/templates/nextcloud.ini.j2
@@ -1,5 +1,5 @@
 ; The home-server project produces a multi-purpose setup using Ansible.
-; Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+; Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 ; Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 [uwsgi]
diff --git a/roles/nextcloud_davfs/meta.OK/main.yml b/roles/nextcloud_davfs/meta.OK/main.yml
index eb0bf6d..d4955df 100644
--- a/roles/nextcloud_davfs/meta.OK/main.yml
+++ b/roles/nextcloud_davfs/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/nextcloud_davfs/tasks/main.yml b/roles/nextcloud_davfs/tasks/main.yml
index b94e268..7db8190 100644
--- a/roles/nextcloud_davfs/tasks/main.yml
+++ b/roles/nextcloud_davfs/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -15,9 +15,20 @@
     name: "{{item}}"
     state: present
   with_items:
-    - davfs2
     - pam_mount
 
+- name: install AUR software
+  include_role:
+    name: aur.inc
+    allow_duplicates: true
+  vars:
+    packages:
+      - pkg: davfs2
+        pre: gpg --batch --recv-keys B94556F81C85D0D5 || true
+    aur_user:
+      name: git
+      home: '!mktemp'
+
 ### UPSTREAM END ⇒ ###
 - name: merge upstream
   include_role: name=etckeeper.inc allow_duplicates=true tasks_from=merge.yml
diff --git a/roles/nfs/handlers/main.yml b/roles/nfs/handlers/main.yml
index 3746e2a..f07a3b4 100644
--- a/roles/nfs/handlers/main.yml
+++ b/roles/nfs/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nfs-server.service
diff --git a/roles/nfs/meta.OK/main.yml b/roles/nfs/meta.OK/main.yml
index 511dd25..69e59c7 100644
--- a/roles/nfs/meta.OK/main.yml
+++ b/roles/nfs/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/nfs/tasks/main.yml b/roles/nfs/tasks/main.yml
index bbed701..28a049a 100644
--- a/roles/nfs/tasks/main.yml
+++ b/roles/nfs/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/nfs/templates/exports.j2 b/roles/nfs/templates/exports.j2
index 181d5e5..6ca2a77 100644
--- a/roles/nfs/templates/exports.j2
+++ b/roles/nfs/templates/exports.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 {% macro clients(opts) %}
diff --git a/roles/nftables.inc/handlers/main.yml b/roles/nftables.inc/handlers/main.yml
index b858859..3fa78d6 100644
--- a/roles/nftables.inc/handlers/main.yml
+++ b/roles/nftables.inc/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nftables.service
diff --git a/roles/nftables.inc/tasks/main.yml b/roles/nftables.inc/tasks/main.yml
index d68cefb..cc91ea8 100644
--- a/roles/nftables.inc/tasks/main.yml
+++ b/roles/nftables.inc/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -25,7 +25,7 @@
 ### ⇐ UPSTREAM END ###
 
 - name: resolve the allowed domain names
-  connection: local
+  delegate_to: localhost
   command: dig +short -t {{item[1]}} {{item[0]}}
   with_nested:
     - "{{(software_mirrors + ' ' + net_allowed_domains).split(' ')}}"
diff --git a/roles/nftables_back/handlers/main.yml b/roles/nftables_back/handlers/main.yml
index 58dcbcb..1c984cc 100644
--- a/roles/nftables_back/handlers/main.yml
+++ b/roles/nftables_back/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: apply sysctl immediately
diff --git a/roles/nftables_back/meta.OK/main.yml b/roles/nftables_back/meta.OK/main.yml
index 2487b03..9cb236b 100644
--- a/roles/nftables_back/meta.OK/main.yml
+++ b/roles/nftables_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/nftables_back/tasks/main.yml b/roles/nftables_back/tasks/main.yml
index 42f7bc4..faf20b8 100644
--- a/roles/nftables_back/tasks/main.yml
+++ b/roles/nftables_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: DMZ firewall
diff --git a/roles/nftables_back/templates/nftables.conf.j2 b/roles/nftables_back/templates/nftables.conf.j2
index 4d60287..bb1fe09 100644
--- a/roles/nftables_back/templates/nftables.conf.j2
+++ b/roles/nftables_back/templates/nftables.conf.j2
@@ -1,6 +1,6 @@
 #!/usr/bin/env nft -f
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 flush ruleset
diff --git a/roles/nftables_front/meta.OK/main.yml b/roles/nftables_front/meta.OK/main.yml
index 4b4b6b3..b6319d0 100644
--- a/roles/nftables_front/meta.OK/main.yml
+++ b/roles/nftables_front/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/nftables_front/tasks/main.yml b/roles/nftables_front/tasks/main.yml
index 8c9bb68..5f9976a 100644
--- a/roles/nftables_front/tasks/main.yml
+++ b/roles/nftables_front/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: SafeZone firewall
diff --git a/roles/nftables_front/templates/nftables.conf.j2 b/roles/nftables_front/templates/nftables.conf.j2
index 3136a88..6e83d22 100644
--- a/roles/nftables_front/templates/nftables.conf.j2
+++ b/roles/nftables_front/templates/nftables.conf.j2
@@ -1,6 +1,6 @@
 #!/usr/bin/env nft -f
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 flush ruleset
diff --git a/roles/ntp/handlers/main.yml b/roles/ntp/handlers/main.yml
index 5254fda..b499631 100644
--- a/roles/ntp/handlers/main.yml
+++ b/roles/ntp/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart NTP
diff --git a/roles/ntp/meta.OK/main.yml b/roles/ntp/meta.OK/main.yml
index a03553a..8a1f183 100644
--- a/roles/ntp/meta.OK/main.yml
+++ b/roles/ntp/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/ntp/tasks/main.yml b/roles/ntp/tasks/main.yml
index b0e3205..14f5287 100644
--- a/roles/ntp/tasks/main.yml
+++ b/roles/ntp/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: create systemd override-directories
diff --git a/roles/php/handlers/main.yml b/roles/php/handlers/main.yml
index e28078e..1dfe3e2 100644
--- a/roles/php/handlers/main.yml
+++ b/roles/php/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart php-fpm.service (front)
diff --git a/roles/php/meta.OK/main.yml b/roles/php/meta.OK/main.yml
index 3cbf8f1..9f62fc5 100644
--- a/roles/php/meta.OK/main.yml
+++ b/roles/php/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/php/tasks/main.yml b/roles/php/tasks/main.yml
index c04e431..42e27ce 100644
--- a/roles/php/tasks/main.yml
+++ b/roles/php/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/postgresql/files/postgresql.conf b/roles/postgresql/files/postgresql.conf
index 1909017..31239f5 100644
--- a/roles/postgresql/files/postgresql.conf
+++ b/roles/postgresql/files/postgresql.conf
@@ -1,11 +1,11 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # cf. /var/lib/postgres/data/postgresql.conf
 
 #listen_addresses = '' # comma-separated list of addresses; defaults to 'localhost'; use '*' for all (change requires restart)
-max_connections = 50
+max_connections = 70
 unix_socket_directories = '/run/shared_sockets,/run/postgresql'
 shared_buffers = 64MB			# min 128kB (change requires restart)
 log_destination = 'syslog'
diff --git a/roles/postgresql/handlers/main.yml b/roles/postgresql/handlers/main.yml
index 81e5a29..3b8584f 100644
--- a/roles/postgresql/handlers/main.yml
+++ b/roles/postgresql/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart postgresql.service
diff --git a/roles/postgresql/meta.OK/main.yml b/roles/postgresql/meta.OK/main.yml
index a28aeef..9dde67c 100644
--- a/roles/postgresql/meta.OK/main.yml
+++ b/roles/postgresql/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/postgresql/tasks/main.yml b/roles/postgresql/tasks/main.yml
index 7e1d2aa..c551ec2 100644
--- a/roles/postgresql/tasks/main.yml
+++ b/roles/postgresql/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/postinstall/meta.OK/main.yml b/roles/postinstall/meta.OK/main.yml
index 511dd25..69e59c7 100644
--- a/roles/postinstall/meta.OK/main.yml
+++ b/roles/postinstall/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/postinstall/tasks/main.yml b/roles/postinstall/tasks/main.yml
index a490130..277615b 100644
--- a/roles/postinstall/tasks/main.yml
+++ b/roles/postinstall/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/printscan/meta.OK/main.yml b/roles/printscan/meta.OK/main.yml
index 511dd25..69e59c7 100644
--- a/roles/printscan/meta.OK/main.yml
+++ b/roles/printscan/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/printscan/tasks/main.yml b/roles/printscan/tasks/main.yml
index 5efbca0..abde319 100644
--- a/roles/printscan/tasks/main.yml
+++ b/roles/printscan/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/privatebin/handlers/main.yml b/roles/privatebin/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/privatebin/handlers/main.yml
+++ b/roles/privatebin/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/privatebin/meta.OK/main.yml b/roles/privatebin/meta.OK/main.yml
index d65c8b6..0415591 100644
--- a/roles/privatebin/meta.OK/main.yml
+++ b/roles/privatebin/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/privatebin/tasks/main.yml b/roles/privatebin/tasks/main.yml
index 721e480..76d2b8a 100644
--- a/roles/privatebin/tasks/main.yml
+++ b/roles/privatebin/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/privatebin/templates/conf.php.j2 b/roles/privatebin/templates/conf.php.j2
index bc3c2b0..1e38f77 100644
--- a/roles/privatebin/templates/conf.php.j2
+++ b/roles/privatebin/templates/conf.php.j2
@@ -1,6 +1,6 @@
 ;<?php http_response_code(403); /*
 ; The home-server project produces a multi-purpose setup using Ansible.
-; Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+; Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 ; Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ; An explanation of each setting can be find online at https://github.com/PrivateBin/PrivateBin/wiki/Configuration.
diff --git a/roles/prosody_back/handlers/main.yml b/roles/prosody_back/handlers/main.yml
index d77b39e..01c64ae 100644
--- a/roles/prosody_back/handlers/main.yml
+++ b/roles/prosody_back/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart prosody.service
diff --git a/roles/prosody_back/meta.OK/main.yml b/roles/prosody_back/meta.OK/main.yml
index 5d48b7c..ff9a1ac 100644
--- a/roles/prosody_back/meta.OK/main.yml
+++ b/roles/prosody_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/prosody_back/tasks/main.yml b/roles/prosody_back/tasks/main.yml
index 1b19e20..f94e797 100644
--- a/roles/prosody_back/tasks/main.yml
+++ b/roles/prosody_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: PostgreSQL user for Prosody
diff --git a/roles/pyruse/handlers/main.yml b/roles/pyruse/handlers/main.yml
index 56d22ca..5058cf4 100644
--- a/roles/pyruse/handlers/main.yml
+++ b/roles/pyruse/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart pyruse-boot@action_nftBan.service
diff --git a/roles/pyruse/meta.OK/main.yml b/roles/pyruse/meta.OK/main.yml
index 5ca780f..82210c3 100644
--- a/roles/pyruse/meta.OK/main.yml
+++ b/roles/pyruse/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/pyruse/tasks/main.yml b/roles/pyruse/tasks/main.yml
index 7c21b2d..73eb18a 100644
--- a/roles/pyruse/tasks/main.yml
+++ b/roles/pyruse/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/slapd/handlers/main.yml b/roles/slapd/handlers/main.yml
index 3f81636..3df1925 100644
--- a/roles/slapd/handlers/main.yml
+++ b/roles/slapd/handlers/main.yml
@@ -1,18 +1,20 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
-- name: restart slapd.service
+- name: convert to slapd.d
   command: |
     bash -c '
-      systemctl daemon-reload
-      systemctl stop slapd.service
-      rm -rf /etc/openldap/slapd.d/*
-      systemctl start slapd.service
-      systemctl stop slapd.service
+      rm -rf /etc/openldap/slapd.d
+      mkdir /etc/openldap/slapd.d
       slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d/
       slapindex
       chown -R ldap:ldap /var/lib/openldap/openldap-data
-      chown -R ldap:ldap /etc/openldap/slapd.d
-      systemctl start slapd.service'
+      chown -R ldap:ldap /etc/openldap/slapd.d'
+
+- name: restart slapd.service
+  systemd:
+    daemon_reload: true
+    name: slapd.service
+    state: restarted
diff --git a/roles/slapd/meta.OK/main.yml b/roles/slapd/meta.OK/main.yml
index 38034be..2047a8f 100644
--- a/roles/slapd/meta.OK/main.yml
+++ b/roles/slapd/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/slapd/tasks/main.yml b/roles/slapd/tasks/main.yml
index 7ea137e..40d6326 100644
--- a/roles/slapd/tasks/main.yml
+++ b/roles/slapd/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -74,8 +74,8 @@
       include         /etc/openldap/schema/nis.schema
       include         /etc/openldap/schema/misc.schema
     insertafter: '^include'
-    validate: bash -c 'rm -rf /etc/openldap/slapd.d/* && slaptest -f %s -F /etc/openldap/slapd.d/ && chgrp -R ldap /etc/openldap/slapd.d && chmod -R g=u /etc/openldap/slapd.d'
   notify:
+    - convert to slapd.d
     - restart slapd.service
 
 - name: set LDAP indexes
@@ -90,8 +90,8 @@
       index   sn              pres,sub,eq
       index   dc              eq
     insertafter: '^index'
-    validate: bash -c 'rm -rf /etc/openldap/slapd.d/* && slaptest -f %s -F /etc/openldap/slapd.d/ && chgrp -R ldap /etc/openldap/slapd.d && chmod -R g=u /etc/openldap/slapd.d'
   notify:
+    - convert to slapd.d
     - restart slapd.service
 
 - name: set LDAP access rules
@@ -110,15 +110,8 @@
               by dn.base="cn=root,{{ldap_root}}" write
               by * read
     insertbefore: '^# Sample access control policy'
-    validate: bash -c 'rm -rf /etc/openldap/slapd.d/* && slaptest -f %s -F /etc/openldap/slapd.d/ && chgrp -R ldap /etc/openldap/slapd.d && chmod -R g=u /etc/openldap/slapd.d'
-  notify:
-    - restart slapd.service
-
-- name: create LDAP DB_CONFIG
-  command: bash -c 'cp /var/lib/openldap/openldap-data/DB_CONFIG{.example,}'
-  args:
-    creates: /var/lib/openldap/openldap-data/DB_CONFIG
   notify:
+    - convert to slapd.d
     - restart slapd.service
 
 - name: LDAP enabled
diff --git a/roles/sockets/handlers/main.yml b/roles/sockets/handlers/main.yml
index e670dec..954a645 100644
--- a/roles/sockets/handlers/main.yml
+++ b/roles/sockets/handlers/main.yml
@@ -1,7 +1,7 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: create tmpfiles
-  command: systemd-tmpfiles --create
+  command: systemd-tmpfiles --create /etc/tmpfiles.d/shared_sockets.conf
diff --git a/roles/sockets/tasks/main.yml b/roles/sockets/tasks/main.yml
index b9d455f..f55f36e 100644
--- a/roles/sockets/tasks/main.yml
+++ b/roles/sockets/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: create a directory for shared sockets
diff --git a/roles/ssh/handlers/main.yml b/roles/ssh/handlers/main.yml
index be26a73..7349bf4 100644
--- a/roles/ssh/handlers/main.yml
+++ b/roles/ssh/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart sshd.service
diff --git a/roles/ssh/meta.OK/main.yml b/roles/ssh/meta.OK/main.yml
index a03553a..8a1f183 100644
--- a/roles/ssh/meta.OK/main.yml
+++ b/roles/ssh/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/ssh/tasks/main.yml b/roles/ssh/tasks/main.yml
index 3bc3843..da7842f 100644
--- a/roles/ssh/tasks/main.yml
+++ b/roles/ssh/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # WARNING: This file may be used inside a mounted chroot.
diff --git a/roles/ssowat/handlers/main.yml b/roles/ssowat/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/ssowat/handlers/main.yml
+++ b/roles/ssowat/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/ssowat/meta.OK/main.yml b/roles/ssowat/meta.OK/main.yml
index d65c8b6..0415591 100644
--- a/roles/ssowat/meta.OK/main.yml
+++ b/roles/ssowat/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/ssowat/tasks/main.yml b/roles/ssowat/tasks/main.yml
index 6bb9f50..81ec988 100644
--- a/roles/ssowat/tasks/main.yml
+++ b/roles/ssowat/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
@@ -10,25 +10,25 @@
     msg: SSOwat
 ### ⇐ UPSTREAM BEGIN ###
 
-- name: install software
-  package:
-    name: "{{item}}"
-    state: present
-  with_items:
-    - lua51-filesystem
-
-- name: install AUR software
-  include_role:
-    name: aur.inc
-    allow_duplicates: true
-  vars:
-    packages:
-      - lua51-lualdap-git
-      - ssowat-git
-    aur_user: git
-# USUALLY NOT UP-TO-DATE… :-(
+#- name: install software
+#  package:
+#    name: "{{item}}"
+#    state: present
+#  with_items:
+#    - luajit
+#    - lua51-filesystem
+#
+#- name: install AUR software
+#  include_role:
+#    name: aur.inc
+#    allow_duplicates: true
+#  vars:
+#    packages:
+#      - lua51-lualdap-git
 #      - nginx-mainline-mod-ndk
 #      - nginx-mainline-mod-lua
+#      - ssowat-git
+#    aur_user: git
 
 ### UPSTREAM END ⇒ ###
 - name: merge upstream
diff --git a/roles/transmission/handlers/main.yml b/roles/transmission/handlers/main.yml
index 8f91f95..f09e84f 100644
--- a/roles/transmission/handlers/main.yml
+++ b/roles/transmission/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nginx.service
diff --git a/roles/transmission/meta.OK/main.yml b/roles/transmission/meta.OK/main.yml
index 27265a9..9bd4981 100644
--- a/roles/transmission/meta.OK/main.yml
+++ b/roles/transmission/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/transmission/tasks/main.yml b/roles/transmission/tasks/main.yml
index 73884ed..2116686 100644
--- a/roles/transmission/tasks/main.yml
+++ b/roles/transmission/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/transmission_back/handlers/main.yml b/roles/transmission_back/handlers/main.yml
index ee4846c..168a4a4 100644
--- a/roles/transmission_back/handlers/main.yml
+++ b/roles/transmission_back/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: enforce net_core_mem_max limit
diff --git a/roles/transmission_back/meta.OK/main.yml b/roles/transmission_back/meta.OK/main.yml
index a03553a..8a1f183 100644
--- a/roles/transmission_back/meta.OK/main.yml
+++ b/roles/transmission_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/transmission_back/tasks/main.yml b/roles/transmission_back/tasks/main.yml
index b280846..fe7e1bb 100644
--- a/roles/transmission_back/tasks/main.yml
+++ b/roles/transmission_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 # https://falkhusemann.de/blog/2012/07/transmission-utp-and-udp-buffer-optimizations/
diff --git a/roles/transmission_nfs/handlers/main.yml b/roles/transmission_nfs/handlers/main.yml
index 3746e2a..f07a3b4 100644
--- a/roles/transmission_nfs/handlers/main.yml
+++ b/roles/transmission_nfs/handlers/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: restart nfs-server.service
diff --git a/roles/transmission_nfs/meta.OK/main.yml b/roles/transmission_nfs/meta.OK/main.yml
index 36b4c69..6d92d0e 100644
--- a/roles/transmission_nfs/meta.OK/main.yml
+++ b/roles/transmission_nfs/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/transmission_nfs/tasks/main.yml b/roles/transmission_nfs/tasks/main.yml
index 289938e..318882f 100644
--- a/roles/transmission_nfs/tasks/main.yml
+++ b/roles/transmission_nfs/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 ### UPSTREAM BEGIN ⇒ ###
diff --git a/roles/transmission_nfs/templates/exports.j2 b/roles/transmission_nfs/templates/exports.j2
index 99a1972..7d0d100 100644
--- a/roles/transmission_nfs/templates/exports.j2
+++ b/roles/transmission_nfs/templates/exports.j2
@@ -1,5 +1,5 @@
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 {% macro clients(opts) %}
diff --git a/roles/wallabag_back/meta.OK/main.yml b/roles/wallabag_back/meta.OK/main.yml
index 5d48b7c..ff9a1ac 100644
--- a/roles/wallabag_back/meta.OK/main.yml
+++ b/roles/wallabag_back/meta.OK/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 dependencies:
diff --git a/roles/wallabag_back/tasks/main.yml b/roles/wallabag_back/tasks/main.yml
index 6540b5d..dc97748 100644
--- a/roles/wallabag_back/tasks/main.yml
+++ b/roles/wallabag_back/tasks/main.yml
@@ -1,6 +1,6 @@
 ---
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 - name: PostgreSQL user for wallabag
diff --git a/tools/graphviz_roles.sh b/tools/graphviz_roles.sh
index 9fd6626..579975e 100755
--- a/tools/graphviz_roles.sh
+++ b/tools/graphviz_roles.sh
@@ -1,6 +1,6 @@
 #!/bin/bash
 # The home-server project produces a multi-purpose setup using Ansible.
-# Copyright © 2018 Y. Gablin, under the GPL-3.0-or-later license.
+# Copyright © 2018–2023 Y. Gablin, under the GPL-3.0-or-later license.
 # Full licensing information in the LICENSE file, or gnu.org/licences/gpl-3.0.txt if the file is missing.
 
 cd "$(dirname "$0")/../roles"