ansible: asxpio-services is managed by NixOS

With asxpio-services described in nixos/, Ansible only has asxpio-ops
left. Drop the runner, SillyTavern and Minecraft roles, the services
host from both inventories, and the WireGuard client play.

The s3fs role and playbook go as well: the mounts were switched off on
asxpio-ops, and on asxpio-services nothing read them. The credentials
file the role once wrote on asxpio-ops stays, because the backup script
there reads it.

site.yaml against asxpio-ops still changes nothing.

Assisted-by: Claude:fable-5-2

ansible/inventory/group_vars/all/s3.yaml

@@ -1,39 +0,0 @@
----
-# S3 Object Storage Configuration
-# These should be overridden in vault or environment-specific vars
-
-# S3 Endpoint Configuration
-s3_region: hel1
-s3_endpoint: "https://{{ s3_region }}.your-objectstorage.com"
-
-# S3 Credentials
-# WARNING: Store these in ansible-vault encrypted file!
-# Override these in group_vars/all/vault.yaml (encrypted)
-s3_access_key: "{{ vault_s3_access_key | default('') }}"
-s3_secret_key: "{{ vault_s3_secret_key | default('') }}"
-
-# S3 Bucket names
-s3_bucket_terraform_main: asxpio-terraform-main
-s3_bucket_terraform_repl: asxpio-terraform-repl
-s3_bucket_backups_main: asxpio-backups-main
-s3_bucket_backups_repl: asxpio-backups-repl
-s3_bucket_immich_main: asxpio-immich-main
-s3_bucket_immich_repl: asxpio-immich-repl
-
-# S3 Buckets to mount on servers (non-replication only)
-s3_buckets:
-  - name: "{{ s3_bucket_terraform_main }}"
-    mount_point: /mnt/s3/terraform
-    owner: root
-    group: root
-    mode: "0755"
-  - name: "{{ s3_bucket_backups_main }}"
-    mount_point: /mnt/s3/backups
-    owner: root
-    group: root
-    mode: "0755"
-  - name: "{{ s3_bucket_immich_main }}"
-    mount_point: /mnt/s3/immich
-    owner: root
-    group: docker
-    mode: "0775"

ansible/inventory/group_vars/services_servers/forgejo_runner.yaml

@@ -1,20 +0,0 @@
----
-# Forgejo Runner (CI/CD) configuration
-
-# Runner version and settings
-forgejo_runner_version: "11"
-forgejo_runner_capacity: 4
-forgejo_runner_timeout: 3h
-
-# Image behind the nix-latest label. Jobs mount a nix-store volume over
-# /nix, seeded from this image on first use; the image's /bin/sh and
-# /etc/nix/nix.conf link into that store, so a volume from another
-# version breaks them. Bumping this also switches to a fresh volume.
-forgejo_runner_nix_version: "2.35.3"
-forgejo_runner_token: "{{ vault_forgejo_runner_token }}"
-
-# Runner installation path
-forgejo_runner_base_path: "{{ services_base_path }}/forgejo-runner"
-
-# The runner talks to Forgejo over the VPC, not through Traefik
-forgejo_http_port: 3000

ansible/inventory/group_vars/services_servers/minecraft.yaml

@@ -1,4 +0,0 @@
----
-minecraft_fossils_owner: asxpi
-minecraft_fossils_rcon_password: "{{ vault_minecraft_fossils_rcon_password }}"
-minecraft_fossils_cf_api_key: "{{ vault_minecraft_fossils_cf_api_key }}"