chore: update media roles for incus

- prevent incus roles from exporting haproxy endpoints (for now)
- incus doesnt need to mount cephfs

hieradata/virtual/lxc.yaml

@@ -5,3 +5,12 @@ profiles::packages::include:
 
 # disable mlock for vault nodes on lxd/incus
 vault::disable_mlock: true
+
+hiera_exclude:
+  # exclude the media profiles which are just cephfs-mount-management
+  - profiles::media::lidar
+  - profiles::media::nzbget
+  - profiles::media::prowlarr
+  - profiles::media::radarr
+  - profiles::media::readarr
+  - profiles::media::sonarr

site/profiles/manifests/media/jellyfin.pp

@@ -13,6 +13,7 @@ class profiles::media::jellyfin (
   Boolean              $migrate_data   = true,
 ) {
 
+  if $facts['virtual'] == 'lxc' {
     include profiles::ceph::client
 
     # manage the sharedvol
@@ -38,6 +39,7 @@ class profiles::media::jellyfin (
         'fall 2',
       ]
     }
+  }
 
   mkdir::p {[$data_dir, $lib_dir, $cache_dir, $config_dir, $log_dir]:}
   -> file { [$data_dir, $lib_dir, $cache_dir, $config_dir, $log_dir]: