sync: Inventory-Realabgleich + neue host_vars/roles/playbooks

Nachgezogener Arbeitsstand des Homelabs:
- neue host_vars (k3s-*, gluster-*, docmost, paperless, kometa, thelounge, satisfactory, wolfstack-vm)
- neue Rollen/Playbooks (net_watchdog, patchmon-agent, tc_ratelimit, sops-age, rotate-ssh-key, dns-doh, remove-postfix, checkrr-deploy)
- diverse Rollen-Updates (base, borg, dns_resolver, frp_client, hawser, nvidia)

Ausgeklammert (bleiben uncommittet): host_vars/docmost/vars.yml (Klartext-Token -> sollte vault-konform via vault_* referenziert werden).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

host_vars/emby-sascha/frp.yml

@@ -4,3 +4,7 @@ frp_proxies:
     local_ip: "0.0.0.0"
     local_port: 8096
     remote_port: 18096
+  - name: jellyfin
+    local_ip: "0.0.0.0"
+    local_port: 9096
+    remote_port: 38096

host_vars/gluster-n1/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.1.1.135
+ansible_user: sascha

host_vars/gluster-n3/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.3.1.135
+ansible_user: sascha

host_vars/gluster-n6/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.6.1.135
+ansible_user: sascha

host_vars/k3s-control/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.3.1.110
+ansible_user: sascha

host_vars/k3s-worker1/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.3.1.111
+ansible_user: sascha

host_vars/k3s-worker2/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.3.1.112
+ansible_user: sascha

host_vars/k3s-worker3/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.3.1.113
+ansible_user: sascha

host_vars/kometa/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.5.1.115
+ansible_user: sascha

host_vars/node1/wireguard.yml

@@ -1,4 +1,4 @@
 ---
 wireguard_address: "10.200.200.11/24"
 wireguard_private_key: "{{ vault_node1_wg_privkey }}"
-wireguard_allowed_ips: "10.200.200.0/24"
+wireguard_allowed_ips: "10.200.200.0/24, 10.10.1.0/24"

host_vars/node2/wireguard.yml

@@ -1,4 +1,4 @@
 ---
 wireguard_address: "10.200.200.12/24"
 wireguard_private_key: "{{ vault_node2_wg_privkey }}"
-wireguard_allowed_ips: "10.200.200.0/24"
+wireguard_allowed_ips: "10.200.200.0/24, 10.10.1.0/24"

host_vars/node3/wireguard.yml

@@ -1,4 +1,4 @@
 ---
 wireguard_address: "10.200.200.13/24"
 wireguard_private_key: "{{ vault_node3_wg_privkey }}"
-wireguard_allowed_ips: "10.200.200.0/24"
+wireguard_allowed_ips: "10.200.200.0/24, 10.10.1.0/24"

host_vars/node4/wireguard.yml

@@ -1,4 +1,4 @@
 ---
 wireguard_address: "10.200.200.14/24"
 wireguard_private_key: "{{ vault_node4_wg_privkey }}"
-wireguard_allowed_ips: "10.200.200.0/24"
+wireguard_allowed_ips: "10.200.200.0/24, 10.10.1.0/24"

host_vars/node5/wireguard.yml

@@ -1,4 +1,4 @@
 ---
 wireguard_address: "10.200.200.15/24"
 wireguard_private_key: "{{ vault_node5_wg_privkey }}"
-wireguard_allowed_ips: "10.200.200.0/24"
+wireguard_allowed_ips: "10.200.200.0/24, 10.10.1.0/24"

host_vars/node6/wireguard.yml

@@ -1,4 +1,4 @@
 ---
 wireguard_address: "10.200.200.16/24"
 wireguard_private_key: "{{ vault_node6_wg_privkey }}"
-wireguard_allowed_ips: "10.200.200.0/24"
+wireguard_allowed_ips: "10.200.200.0/24, 10.10.1.0/24"

host_vars/node7/wireguard.yml

@@ -1,4 +1,4 @@
 ---
 wireguard_address: "10.200.200.17/24"
 wireguard_private_key: "{{ vault_node7_wg_privkey }}"
-wireguard_allowed_ips: "10.200.200.0/24"
+wireguard_allowed_ips: "10.200.200.0/24, 10.10.1.0/24"

host_vars/paperless/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.5.1.120
+ansible_user: sascha

host_vars/satisfactory/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.3.1.120
+ansible_user: sascha

host_vars/thelounge/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.5.1.117
+ansible_user: sascha

host_vars/wolfstack-vm/vars.yml

@@ -0,0 +1,2 @@
+ansible_host: 10.1.1.110
+ansible_user: sascha