sync: Inventory-Realabgleich + neue host_vars/roles/playbooks

Nachgezogener Arbeitsstand des Homelabs:
- neue host_vars (k3s-*, gluster-*, docmost, paperless, kometa, thelounge, satisfactory, wolfstack-vm)
- neue Rollen/Playbooks (net_watchdog, patchmon-agent, tc_ratelimit, sops-age, rotate-ssh-key, dns-doh, remove-postfix, checkrr-deploy)
- diverse Rollen-Updates (base, borg, dns_resolver, frp_client, hawser, nvidia)

Ausgeklammert (bleiben uncommittet): host_vars/docmost/vars.yml (Klartext-Token -> sollte vault-konform via vault_* referenziert werden).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

checkrr-deploy.yml

@@ -0,0 +1,87 @@
+---
+# Deploy Checkrr config to arrapps stack
+- name: Deploy Checkrr configuration
+  hosts: arrapps
+  become: true
+  gather_facts: false
+
+  tasks:
+    - name: Ensure /app-config/arr directory exists
+      ansible.builtin.file:
+        path: /app-config/arr
+        state: directory
+        mode: '0755'
+
+    - name: Create checkrr subdirectory with correct permissions
+      ansible.builtin.file:
+        path: /app-config/arr/checkrr
+        state: directory
+        mode: '0755'
+        owner: '1000'
+        group: '1000'
+
+    - name: Remove old checkrr.yaml (wrong path)
+      ansible.builtin.file:
+        path: /app-config/arr/checkrr.yaml
+        state: absent
+
+    - name: Remove old checkrr.db directory (wrong path)
+      ansible.builtin.file:
+        path: /app-config/arr/checkrr.db
+        state: absent
+
+    - name: Deploy checkrr.yaml config
+      ansible.builtin.copy:
+        dest: /app-config/arr/checkrr/checkrr.yaml
+        mode: '0644'
+        owner: '1000'
+        group: '1000'
+        content: |
+          ---
+          # Checkrr Configuration for arrapps
+          lang: "en-us"
+          checkrr:
+            checkpath:
+              - /data/UHD
+              - /data/FHD
+            database: /checkrr.db
+            runOnce: false
+            port: 8585
+            host: 0.0.0.0
+            cron: "@daily"
+            ignorehidden: true
+          
+          arr:
+            - service: radarr
+              name: radarrUHD
+              url: http://radarrUHD:7878
+              apiKey: ""
+              process: true
+            - service: radarr
+              name: radarrFHD
+              url: http://radarrFHD:7878
+              apiKey: ""
+              process: true
+            - service: sonarr
+              name: sonarrUHD
+              url: http://sonarrUHD:8989
+              apiKey: ""
+              process: true
+            - service: sonarr
+              name: sonarrFHD
+              url: http://sonarrFHD:8989
+              apiKey: ""
+              process: true
+          
+          logs:
+            stdout:
+              out: stdout
+              formatter: default
+
+    - name: Create empty checkrr.db file
+      ansible.builtin.file:
+        path: /app-config/arr/checkrr/checkrr.db
+        state: touch
+        mode: '0644'
+        owner: '1000'
+        group: '1000'