s3fs: allow turning the mounts off, off on asxpio-ops

On the 38 GB ops disk the s3fs cache reserve (ensure_diskfree) never
fit, so all three mounts failed at every boot since 2026-09-22. Backups
now go to Hetzner S3 with rclone instead.

Add s3fs_enabled (default true); when false the role unmounts the
buckets and drops their fstab entries, keeping the credentials file
that the rclone wrapper reads.

Assisted-by: Claude:opus-5

ansible/inventory/host_vars/asxpio-ops.yaml

@@ -6,4 +6,7 @@
 ssh_allow_public_git: true
 ssh_git_user: git
 
+# Off: the cache reserve never fit the 38 GB disk, so the mounts failed at
+# every boot. Backups go to Hetzner S3 with rclone instead.
+s3fs_enabled: false
 s3fs_ensure_diskfree: 20000 # Total:40GB  Keep:20GB free = ~15GB for Cache

ansible/roles/s3fs/defaults/main.yaml

@@ -9,6 +9,10 @@ s3_region: "hel1"
 s3_access_key: ""
 s3_secret_key: ""
 
+# false: no mounts. Unmounts and drops the fstab entries; the credentials
+# file stays (backups use it with rclone, /root/backups/rclone-hetzner.sh).
+s3fs_enabled: true
+
 # S3 Buckets to mount (non-replication buckets only)
 s3_buckets:
   - name: asxpio-terraform-main

ansible/roles/s3fs/tasks/main.yaml

@@ -32,6 +32,9 @@
     owner: root
     group: root
 
+- name: Mount S3 buckets
+  when: s3fs_enabled | bool
+  block:
     - name: Create mount points for S3 buckets
       ansible.builtin.file:
         path: "{{ item.mount_point }}"
@@ -94,3 +97,24 @@
         path: "{{ s3_buckets | selectattr('name', 'equalto', 'asxpio-immich-main') | map(attribute='mount_point') | first }}/.s3fs-test"
         state: absent
       when: write_test is changed
+
+- name: Unmount S3 buckets
+  ansible.builtin.command:
+    cmd: "umount {{ item.mount_point }}"
+  loop: "{{ s3_buckets }}"
+  loop_control:
+    label: "{{ item.mount_point }}"
+  register: umount_result
+  changed_when: umount_result.rc == 0
+  failed_when: false
+  when: not (s3fs_enabled | bool)
+
+- name: Remove S3 buckets from /etc/fstab
+  ansible.builtin.lineinfile:
+    path: /etc/fstab
+    regexp: "^{{ item.name }}\\s+{{ item.mount_point }}\\s"
+    state: absent
+  loop: "{{ s3_buckets }}"
+  loop_control:
+    label: "{{ item.name }} -> {{ item.mount_point }}"
+  when: not (s3fs_enabled | bool)