chore: Update deployment configuration and documentation

- Update Gitea configuration (remove DEFAULT_ACTIONS_URL)
- Fix deployment documentation
- Update Ansible playbooks
- Clean up deprecated files
- Add new deployment scripts and templates

deployment/ansible/playbooks/setup-wireguard.yml

@@ -5,20 +5,13 @@
   gather_facts: yes
 
   vars:
-    wireguard_interface: "wg0"
-    wireguard_config_path: "/etc/wireguard"
-    wireguard_config_file: "{{ wireguard_config_path }}/{{ wireguard_interface }}.conf"
-    wireguard_private_key_file: "{{ wireguard_config_path }}/{{ wireguard_interface }}_private.key"
-    wireguard_public_key_file: "{{ wireguard_config_path }}/{{ wireguard_interface }}_public.key"
-    wireguard_client_configs_path: "{{ wireguard_config_path }}/clients"
-    wireguard_enable_ip_forwarding: true
+    # WireGuard variables are defined in group_vars/production.yml
+    # Can be overridden via -e flag if needed
+    wireguard_port: "{{ wireguard_port | default(wireguard_port_default) }}"
+    wireguard_network: "{{ wireguard_network | default(wireguard_network_default) }}"
+    wireguard_server_ip: "{{ wireguard_server_ip | default(wireguard_server_ip_default) }}"
 
   pre_tasks:
-    - name: Set WireGuard variables with defaults
-      set_fact:
-        wireguard_port: "{{ wireguard_port | default(51820) }}"
-        wireguard_network: "{{ wireguard_network | default('10.8.0.0/24') }}"
-        wireguard_server_ip: "{{ wireguard_server_ip | default('10.8.0.1') }}"
 
     - name: Optionally load wireguard secrets from vault
       include_vars: