chore: Update deployment configuration and documentation

- Update Gitea configuration (remove DEFAULT_ACTIONS_URL)
- Fix deployment documentation
- Update Ansible playbooks
- Clean up deprecated files
- Add new deployment scripts and templates

deployment/ansible/group_vars/production.yml

@@ -13,7 +13,9 @@ docker_registry: "localhost:5000"
 docker_registry_url: "localhost:5000"
 docker_registry_external: "registry.michaelschiemer.de"
 docker_registry_username_default: "admin"
-docker_registry_password_default: "registry-secure-password-2025"
+# docker_registry_password_default should be set in vault as vault_docker_registry_password
+# If not using vault, override via -e docker_registry_password_default="your-password"
+registry_auth_path: "{{ stacks_base_path }}/registry/auth"
 
 # Application Configuration
 app_name: "framework"
@@ -21,6 +23,18 @@ app_domain: "michaelschiemer.de"
 app_image: "{{ docker_registry }}/{{ app_name }}"
 app_image_external: "{{ docker_registry_external }}/{{ app_name }}"
 
+# Domain Configuration
+gitea_domain: "git.michaelschiemer.de"
+
+# Email Configuration
+mail_from_address: "noreply@{{ app_domain }}"
+acme_email: "kontakt@{{ app_domain }}"
+
+# SSL Certificate Domains
+ssl_domains:
+  - "{{ gitea_domain }}"
+  - "{{ app_domain }}"
+
 # Health Check Configuration
 health_check_url: "https://{{ app_domain }}/health"
 health_check_retries: 10
@@ -34,14 +48,26 @@ rollback_timeout: 300
 wait_timeout: 60
 
 # Git Configuration (for sync-code.yml)
-git_repository_url_default: "https://git.michaelschiemer.de/michael/michaelschiemer.git"
+git_repository_url_default: "https://{{ gitea_domain }}/michael/michaelschiemer.git"
 git_branch_default: "main"
 git_token: "{{ vault_git_token | default('') }}"
 git_username: "{{ vault_git_username | default('') }}"
 git_password: "{{ vault_git_password | default('') }}"
 
+# Database Configuration
+db_user_default: "postgres"
+db_name_default: "michaelschiemer"
+
 # MinIO Object Storage Configuration
 minio_root_user: "{{ vault_minio_root_user | default('minioadmin') }}"
 minio_root_password: "{{ vault_minio_root_password | default('') }}"
 minio_api_domain: "minio-api.michaelschiemer.de"
 minio_console_domain: "minio.michaelschiemer.de"
+
+# WireGuard Configuration
+wireguard_interface: "wg0"
+wireguard_config_path: "/etc/wireguard"
+wireguard_port_default: 51820
+wireguard_network_default: "10.8.0.0/24"
+wireguard_server_ip_default: "10.8.0.1"
+wireguard_enable_ip_forwarding: true