ansible: add xray_client role + playbook + [xray] inventory group

- New role: xray_client (deploys Xray VLESS+Reality client container)
- New playbook: xray-client.yml
- New inventory group: [xray] (emby-sascha, emby-chris)
- pfannkuchen.sh: new command 'xray'
- Prepared for migration from FRP to Xray tunnel

pfannkuchen.sh

@@ -15,7 +15,8 @@ usage() {
   echo -e "  ${C}base${N}     <host>     Nur Basis + Docker"
   echo -e "  ${C}gpu${N}      <host>     NVIDIA Treiber + Docker GPU Runtime"
   echo -e "  ${C}backup${N}   [host]     Borg Backup einrichten (default: alle backup-Hosts)"
-  echo -e "  ${C}hawser${N}   <host>     Hawser installieren"
+  echo -e "  ${C}hawser${N}   [host]     Hawser installieren (default: alle Docker-VMs)"
+  echo -e "  ${C}patchmon${N} [host]     PatchMon Agent deployen (Docker-VMs + Proxmox)"
   echo -e "  ${C}pve${N}      [host]     Proxmox Post-Install (Repos, Nag, HA)"
   echo -e "  ${C}passthrough${N} [host]  GPU PCI Passthrough vorbereiten"
   echo -e "  ${C}telegraf${N}  [host]     Telegraf Monitoring deployen"
@@ -23,6 +24,8 @@ usage() {
   echo -e "  ${C}sshfs${N}    [host]     SSHFS Mounts einrichten"
   echo -e "  ${C}tune${N}     <host>     Sysctl Netzwerk-Tuning"
   echo -e "  ${C}pvetune${N}  [host]     Proxmox Host Tuning (sysctl, resolv, hosts)"
+  echo -e "  ${C}tc${N}         [host]     tc per-flow Rate-Limit (50 Mbit/s pro Connection)"
+  echo -e "  ${C}watchdog${N}            Network Watchdog deployen (Whitelist aus Ansible)"
   echo -e "  ${C}pveexporter${N} [host]  PVE Exporter (Prometheus Metriken)"
   echo -e "  ${C}update${N}   [host]     Dist-Upgrade (default: alle Hosts)"
   echo -e "  ${C}list${N}              Inventory anzeigen"
@@ -32,6 +35,10 @@ usage() {
   echo -e ""
   echo -e "${B}Beispiele:${N}"
   echo -e "  $0 setup emby_sascha"
+  echo -e "  $0 hawser"
+  echo -e "  $0 hawser pfannkuchen"
+  echo -e "  $0 patchmon"
+  echo -e "  $0 patchmon dockhand"
   echo -e "  $0 backup proxmox"
   echo -e "  $0 update"
   echo -e "  $0 gpu tdarr"
@@ -72,8 +79,18 @@ case "$CMD" in
     fi
     ;;
   hawser)
-    [ -z "$HOST" ] && echo -e "${R}Fehler: Host angeben${N}" && exit 1
-    run hawser.yml -l "$HOST"
+    if [ -n "$HOST" ]; then
+      run hawser.yml -l "$HOST"
+    else
+      run hawser.yml
+    fi
+    ;;
+  patchmon)
+    if [ -n "$HOST" ]; then
+      run patchmon-agent.yml -l "$HOST"
+    else
+      run patchmon-agent.yml
+    fi
     ;;
   sshfs)
     if [ -n "$HOST" ]; then
@@ -135,6 +152,17 @@ case "$CMD" in
       run update.yml
     fi
     ;;
+  tc)
+    if [ -n "$HOST" ]; then
+      run tc-ratelimit.yml -l "$HOST"
+    else
+      run tc-ratelimit.yml
+    fi
+    ;;
+    xray) PLAYBOOK="xray-client.yml" ;;
+  watchdog)
+    run net-watchdog.yml
+    ;;
   list)
     ansible-inventory --list --yaml 2>/dev/null || ansible-inventory --graph
     ;;