diff --git a/group_vars/sshsign.yml b/group_vars/sshsign.yml
deleted file mode 100644
index 91ca329..0000000
--- a/group_vars/sshsign.yml
+++ /dev/null
@@ -1,6 +0,0 @@
----
-datadisks:
-  - {size: 10}
-firewall_in:
-  - {proto: tcp, port: 22, from: [172.20.20.0/22]}
-  - {proto: tcp, port: 443}
diff --git a/host_vars/sshsign01.home.foo.sh.yml b/host_vars/sshsign01.home.foo.sh.yml
deleted file mode 100644
index 12efc17..0000000
--- a/host_vars/sshsign01.home.foo.sh.yml
+++ /dev/null
@@ -1,6 +0,0 @@
----
-vmhost: vmhost01.home.foo.sh
-network_interfaces:
-  - device: vio0
-    vlan: 20
-    mac: 52:54:00:ac:dc:5b
diff --git a/host_vars/sshsign02.home.foo.sh.yml b/host_vars/sshsign02.home.foo.sh.yml
deleted file mode 100644
index 11748d5..0000000
--- a/host_vars/sshsign02.home.foo.sh.yml
+++ /dev/null
@@ -1,6 +0,0 @@
----
-vmhost: vmhost02.home.foo.sh
-network_interfaces:
-  - device: vio0
-    vlan: 20
-    mac: 52:54:00:ac:dc:5c
diff --git a/hosts b/hosts
index f9c5139..766b236 100644
--- a/hosts
+++ b/hosts
@@ -81,10 +81,6 @@ shell02.foo.sh
 [sqldb]
 sqldb02.home.foo.sh
 
-[sshsign]
-sshsign01.home.foo.sh
-sshsign02.home.foo.sh
-
 [static]
 static01.home.foo.sh
 static02.home.foo.sh
@@ -116,7 +112,6 @@ ns
 proxy
 relay
 shell
-sshsign
 static
 zm
 
@@ -130,7 +125,6 @@ log
 ns
 proxy
 relay
-sshsign
 
 [rocky8:children]
 adm
@@ -153,3 +147,5 @@ sqldb
 static
 vmhost
 zm
+
+[rocky9:children]
diff --git a/playbooks/sshsign.yml b/playbooks/sshsign.yml
deleted file mode 100644
index 1df0581..0000000
--- a/playbooks/sshsign.yml
+++ /dev/null
@@ -1,24 +0,0 @@
----
-- import_playbook: "include/deploy-kvm-guest.yml myhosts=sshsign"
-
-- name: configure instance
-  hosts: sshsign
-  user: root
-  gather_facts: true
-
-  vars_files:
-    - "{{ ansible_private }}/vars.yml"
-
-  pre_tasks:
-    - name: mount /export
-      mount:
-        name: /export
-        src: /dev/sd1a
-        fstype: ffs
-        opts: rw,softdep,noatime
-        passno: "1"
-        dump: "2"
-        state: mounted
-
-  roles:
-    - base