sync: Inventory-Realabgleich + neue host_vars/roles/playbooks

Nachgezogener Arbeitsstand des Homelabs:
- neue host_vars (k3s-*, gluster-*, docmost, paperless, kometa, thelounge, satisfactory, wolfstack-vm)
- neue Rollen/Playbooks (net_watchdog, patchmon-agent, tc_ratelimit, sops-age, rotate-ssh-key, dns-doh, remove-postfix, checkrr-deploy)
- diverse Rollen-Updates (base, borg, dns_resolver, frp_client, hawser, nvidia)

Ausgeklammert (bleiben uncommittet): host_vars/docmost/vars.yml (Klartext-Token -> sollte vault-konform via vault_* referenziert werden).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

roles/base/tasks/main.yml

@@ -9,11 +9,19 @@
     regexp: '^127\.0\.1\.1'
     line: "127.0.1.1  {{ inventory_hostname }}.local {{ inventory_hostname }}"
 
+- name: Prüfe ob Benutzer {{ base_user }} existiert
+  getent:
+    database: passwd
+    key: "{{ base_user }}"
+  register: base_user_check
+  ignore_errors: yes
+
 - name: SSH Public Key für Benutzer {{ base_user }} hinterlegen
   ansible.posix.authorized_key:
     user: "{{ base_user }}"
     state: present
     key: "{{ vault_ssh_pubkey }}"
+  when: base_user_check is succeeded
 
 - name: SSH Private Key für Benutzer {{ base_user }} deployen
   copy:
@@ -22,6 +30,7 @@
     owner: "{{ base_user }}"
     group: "{{ base_user }}"
     mode: "0600"
+  when: base_user_check is succeeded
 
 - name: SSH Public Key Datei für Benutzer {{ base_user }} deployen
   copy:
@@ -30,6 +39,7 @@
     owner: "{{ base_user }}"
     group: "{{ base_user }}"
     mode: "0644"
+  when: base_user_check is succeeded
 
 - name: SSH Key auch für root hinterlegen
   ansible.posix.authorized_key:
@@ -85,24 +95,28 @@
     name: locales
     state: present
 
-- name: en_US.UTF-8 Locale generieren
+- name: de_DE.UTF-8 Locale generieren
   locale_gen:
-    name: en_US.UTF-8
+    name: de_DE.UTF-8
     state: present
 
-- name: Systemweite Sprache auf en_US.UTF-8 setzen
+- name: Systemweite Sprache auf de_DE.UTF-8 setzen
   debconf:
     name: locales
     question: locales/default_environment_locale
-    value: en_US.UTF-8
+    value: de_DE.UTF-8
     vtype: select
 
 - name: Locale-Datei manuell schreiben (Sicherheitsnetz)
   copy:
     dest: /etc/default/locale
     content: |
-      LANG=en_US.UTF-8
-      LC_ALL=en_US.UTF-8
+      LANG=de_DE.UTF-8
+      LC_ALL=de_DE.UTF-8
+
+- name: Zeitzone auf Europe/Berlin setzen
+  timezone:
+    name: Europe/Berlin
 
 - name: Gruppe sudo passwortloses sudo erlauben
   lineinfile:
@@ -117,6 +131,7 @@
     name: "{{ base_user }}"
     groups: sudo
     append: yes
+  when: base_user_check is succeeded
 
 - name: Unnötige Pakete entfernen
   apt:
@@ -126,9 +141,11 @@
   apt:
     name: qemu-guest-agent
     state: present
+  ignore_errors: yes
 
 - name: QEMU Guest Agent aktivieren
   service:
     name: qemu-guest-agent
     state: started
     enabled: yes
+  ignore_errors: yes