Ansible ins Repo migrieren und zentrale SSH-Keys in shared/ssh.

Playbooks liegen unter pve1/ansible und pve2/ansible; authorized_keys
als Fragmente mit Deploy-Skript und Ziel-Matrix für Proxmox, VM 101 und CTs.

Co-authored-by: Cursor <cursoragent@cursor.com>

pve2/ansible/playbooks/disk-maintenance.yml

@@ -0,0 +1,37 @@
+---
+# Weekly disk maintenance for Proxmox LXC containers
+# Run from the Proxmox host: ansible-playbook playbooks/disk-maintenance.yml
+#
+# Tags:
+#   aggressive  — also prune unused images older than 14 days
+#   frigate     — enforce recording/clip retention on docker CT
+#   jellyfin    — clean stale transcode/image cache on media CT
+#   dev-tooling — npm cache clean on AIDEV (off by default)
+
+- name: LXC disk maintenance
+  hosts: lxc_containers
+  become: true
+  gather_facts: true
+  vars:
+    disk_maintenance_enabled: true
+  roles:
+    - role: disk_cleanup
+      when: disk_maintenance_enabled | bool
+
+- name: Report Proxmox thin pool usage
+  hosts: localhost
+  connection: local
+  gather_facts: false
+  tasks:
+    - name: Get LVM thin pool stats
+      ansible.builtin.shell: lvs pve/data nvme_second/nvme_second -o vg_name,lv_name,data_percent 2>/dev/null --noheadings
+      register: thin_pools
+      changed_when: false
+
+    - name: Thin pool summary
+      ansible.builtin.debug:
+        msg: |
+          Proxmox thin pools after maintenance:
+          {{ thin_pools.stdout }}
+
+          Schedule: see /etc/cron.weekly/pve-lxc-disk-maintenance