diff --git a/ansible/deploy.yml b/ansible/deploy.yml
index 534f10a..d318fc9 100644
--- a/ansible/deploy.yml
+++ b/ansible/deploy.yml
@@ -63,18 +63,27 @@
         src: "{{ project_root }}/crt/"
         dest: "{{ deploy_path }}/crt/"
         mode: "0600"
+      changed_when: molecule_test is not defined
 
-    - name: Zertifikate lesbar machen (crt-Dateien)
-      ansible.builtin.file:
+    - name: Existierende crt-Dateien finden
+      ansible.builtin.stat:
         path: "{{ deploy_path }}/crt/{{ item }}"
-        mode: "0644"
       loop:
         - "ca.crt"
         - "{{ target_hostname }}.crt"
         - "{{ target_hostname }}-chain.crt"
         - "localhost.crt"
         - "localhost-chain.crt"
-      ignore_errors: true
+      register: crt_stat
+
+    - name: Zertifikate lesbar machen
+      ansible.builtin.file:
+        path: "{{ deploy_path }}/crt/{{ item.item }}"
+        mode: "0644"
+      loop: "{{ crt_stat.results | selectattr('stat.exists') | list }}"
+      changed_when: molecule_test is not defined
+      loop_control:
+        label: "{{ item.item }}"
 
     # ── Content (optional, nur wenn lokal vorhanden) ──
     - name: Beispiel-Content kopieren (falls vorhanden)
diff --git a/ansible/molecule/default/cleanup.yml b/ansible/molecule/default/cleanup.yml
new file mode 100644
index 0000000..d3c68f6
--- /dev/null
+++ b/ansible/molecule/default/cleanup.yml
@@ -0,0 +1,8 @@
+---
+- name: Cleanup
+  hosts: all
+  gather_facts: false
+  tasks:
+    - name: No-op
+      ansible.builtin.debug:
+        msg: "No cleanup needed"
\ No newline at end of file