diff --git a/ansible/plays/archived/cleanup-gitea-mess.yml b/ansible/plays/archived/cleanup-gitea-mess.yml
index 101a63c3..07de83e0 100644
--- a/ansible/plays/archived/cleanup-gitea-mess.yml
+++ b/ansible/plays/archived/cleanup-gitea-mess.yml
@@ -7,8 +7,18 @@
     gitea_binary: "/usr/local/bin/gitea"
     gitea_conf_dir: "/etc/gitea"
     gitea_service_file: "/etc/systemd/system/gitea.service"
-    
+    # Safety switch: must be set to true explicitly. This play is archived
+    # (one-off cleanup of an accidental install) and deletes the gitea
+    # service/binary/config/user on every host except gitea.srv.renner.uno
+    # if run unguarded.
+    confirm_destroy: false
+
   tasks:
+    - name: Safety Check
+      ansible.builtin.fail:
+        msg: "This archived playbook removes the gitea service/binary/config/user on all hosts except gitea.srv.renner.uno. You must run with -e 'confirm_destroy=true'."
+      when: not confirm_destroy | bool
+
     - name: Stop and disable gitea service
       systemd:
         name: gitea
diff --git a/ansible/plays/archived/remove_ceph_cpool.yml b/ansible/plays/archived/remove_ceph_cpool.yml
index ed4bd4ed..2a3f7882 100644
--- a/ansible/plays/archived/remove_ceph_cpool.yml
+++ b/ansible/plays/archived/remove_ceph_cpool.yml
@@ -2,7 +2,17 @@
 - name: Remove cpool storage and uninstall Ceph
   hosts: pve_cluster
   become: true
+  vars:
+    # Safety switch: must be set to true explicitly. This play is archived
+    # (one-off Ceph decommission) and destroys ZFS volumes fleet-wide via
+    # `zfs destroy -rf` if run unguarded.
+    confirm_destroy: false
   tasks:
+    - name: Safety Check
+      ansible.builtin.fail:
+        msg: "This archived playbook destroys Ceph OSD ZFS volumes and purges Ceph fleet-wide. You must run with -e 'confirm_destroy=true'."
+      when: not confirm_destroy | bool
+
     - name: Remove cpool configuration from Proxmox storage
       command: pvesm remove cpool
       register: pvesm_remove