diff --git a/.ansible-lint b/.ansible-lint
index 441aa214..5cb45ab6 100644
--- a/.ansible-lint
+++ b/.ansible-lint
@@ -23,3 +23,4 @@ exclude_paths:
   - roles/ansible-ufw
   - roles/ansible_role_gitea
   - roles/ansible-role-postgresql
+  - .woodpecker/
diff --git a/.woodpecker/ansible-lint.yml b/.woodpecker/ansible-lint.yml
index 3c701c4a..1b2bc14a 100644
--- a/.woodpecker/ansible-lint.yml
+++ b/.woodpecker/ansible-lint.yml
@@ -13,6 +13,6 @@ steps:
     # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
     secrets: [vaultpass]
     when:
-      - event: [push, pull_request, cron]
+      - event: [push, pull_request, cron, pull_request_closed, tag, release, manual]
         evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
 ...
diff --git a/.woodpecker/ansible-playbook.yml b/.woodpecker/ansible-playbook.yml
new file mode 100644
index 00000000..c2e4506c
--- /dev/null
+++ b/.woodpecker/ansible-playbook.yml
@@ -0,0 +1,18 @@
+---
+depends_on:
+  - ansible-lint
+
+steps:
+  ansible-playbook:
+    image: quay.io/ansible/creator-ee:v24.2.0
+    commands:
+      - ansible-lint --version
+      - echo $${VAULTPASS} > ./vault-pass.yml # nach des Secret in Großschreibung
+      - ansible-galaxy install -r requirements.yaml
+      - echo RUUUUUN! #ansible-playbook playbooks/2_all.yml playbooks/3_service/* --limit production
+    # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
+    secrets: [vaultpass]
+    when:
+      - event: [push, pull_request_closed]
+        branch: master
+...
diff --git a/.woodpecker/gitleaks.yml b/.woodpecker/gitleaks.yml
index fcc9d083..afb2b029 100644
--- a/.woodpecker/gitleaks.yml
+++ b/.woodpecker/gitleaks.yml
@@ -5,6 +5,6 @@ steps:
     commands:
       - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
     when:
-      - event: [push, pull_request, cron]
+      - event: [push, pull_request, cron, pull_request_closed, tag, release, manual]
         evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
 ...
diff --git a/docker-compose/nextcloud/mail_settings.png b/docker-compose/nextcloud/mail_settings.png
deleted file mode 100644
index e1138de7..00000000
Binary files a/docker-compose/nextcloud/mail_settings.png and /dev/null differ