fix: Gitea Traefik routing and connection pool optimization

- Remove middleware reference from Gitea Traefik labels (caused routing issues)
- Optimize Gitea connection pool settings (MAX_IDLE_CONNS=30, authentication_timeout=180s)
- Add explicit service reference in Traefik labels
- Fix intermittent 504 timeouts by improving PostgreSQL connection handling

Fixes Gitea unreachability via git.michaelschiemer.de

deployment/ansible/playbooks/deploy-application-code.yml

@@ -1,167 +1,18 @@
 ---
-- name: Deploy Application Code via Git
-  hosts: "{{ deployment_hosts | default('production') }}"
+# Deploy Application Code via Git
+# Wrapper Playbook for application role deploy_code tasks
+- hosts: "{{ deployment_hosts | default('production') }}"
   gather_facts: yes
   become: no
-
   vars:
-    application_code_dest: "/home/deploy/michaelschiemer/current"
-    git_repository_url_default: "https://git.michaelschiemer.de/michael/michaelschiemer.git"
-    # Determine branch based on environment
-    git_branch: >-
-      {%- if deployment_environment == 'staging' -%}
-        {{ git_branch | default('staging') }}
-      {%- else -%}
-        {{ git_branch | default('main') }}
-      {%- endif -%}
-    git_token: "{{ git_token | default('') }}"
-    # Deployment environment (staging or production)
+    application_deployment_method: git
     deployment_environment: "{{ deployment_environment | default('production') }}"
-
   tasks:
-    - name: Set git_repo_url from provided value or default
-      set_fact:
-        git_repo_url: "{{ git_repository_url if (git_repository_url is defined and git_repository_url != '') else git_repository_url_default }}"
-
-    - name: Ensure Git is installed
-      ansible.builtin.apt:
-        name: git
-        state: present
-        update_cache: no
-      become: yes
-
-    - name: Ensure application code directory exists
-      file:
-        path: "{{ application_code_dest }}"
-        state: directory
-        owner: "{{ ansible_user }}"
-        group: "{{ ansible_user }}"
-        mode: '0755'
-      become: yes
-
-    - name: Check if repository already exists
-      stat:
-        path: "{{ application_code_dest }}/.git"
-      register: git_repo_exists
-
-    - name: Check if destination directory exists
-      stat:
-        path: "{{ application_code_dest }}"
-      register: dest_dir_exists
-
-    - name: Remove destination directory if it exists but is not a git repo
-      file:
-        path: "{{ application_code_dest }}"
-        state: absent
-      when: dest_dir_exists.stat.exists and not git_repo_exists.stat.exists
-      become: yes
-
-    - name: Clone repository (if not exists)
-      ansible.builtin.git:
-        repo: "{{ git_repo_url }}"
-        dest: "{{ application_code_dest }}"
-        version: "{{ git_branch }}"
-        force: no
-        update: no
-      when: not git_repo_exists.stat.exists
-      environment:
-        GIT_TERMINAL_PROMPT: "0"
-      vars:
-        ansible_become: no
-      register: git_clone_result
-      retries: 5
-      delay: 10
-      until: git_clone_result is succeeded
-      ignore_errors: yes
-
-    - name: Fail if git clone failed after retries
-      fail:
-        msg: "Failed to clone repository after 5 retries. Gitea may be unreachable or overloaded. Last error: {{ git_clone_result.msg | default('Unknown error') }}"
-      when:
-        - not git_repo_exists.stat.exists
-        - git_clone_result is failed
-
-    - name: Update repository (if exists)
-      ansible.builtin.git:
-        repo: "{{ git_repo_url }}"
-        dest: "{{ application_code_dest }}"
-        version: "{{ git_branch }}"
-        force: yes
-        update: yes
-      when: git_repo_exists.stat.exists
-      environment:
-        GIT_TERMINAL_PROMPT: "0"
-      vars:
-        ansible_become: no
-      register: git_update_result
-      retries: 5
-      delay: 10
-      until: git_update_result is succeeded
-      ignore_errors: yes
-
-    - name: Fail if git update failed after retries
-      fail:
-        msg: "Failed to update repository after 5 retries. Gitea may be unreachable or overloaded. Last error: {{ git_update_result.msg | default('Unknown error') }}"
-      when:
-        - git_repo_exists.stat.exists
-        - git_update_result is failed
-
-    - name: Set ownership of repository files
-      file:
-        path: "{{ application_code_dest }}"
-        owner: "{{ ansible_user }}"
-        group: "{{ ansible_user }}"
-        recurse: yes
-      become: yes
-
-    - name: Ensure executable permissions on PHP scripts
-      file:
-        path: "{{ application_code_dest }}/{{ item }}"
-        mode: '0755'
-      loop:
-        - worker.php
-        - console.php
-      ignore_errors: yes
-
-    - name: Verify worker.php exists
-      stat:
-        path: "{{ application_code_dest }}/worker.php"
-      register: worker_php_stat
-
-    - name: Verify console.php exists
-      stat:
-        path: "{{ application_code_dest }}/console.php"
-      register: console_php_stat
-
-    - name: Verify composer.json exists
-      stat:
-        path: "{{ application_code_dest }}/composer.json"
-      register: composer_json_stat
-
-    - name: Get current Git commit hash
-      shell: |
-        cd {{ application_code_dest }} && git rev-parse HEAD
-      register: git_commit_hash
-      changed_when: false
-      when: git_repo_exists.stat.exists
-
-    - name: Display file verification results
-      debug:
-        msg: |
-          File Verification:
-          - worker.php: {{ 'EXISTS' if worker_php_stat.stat.exists else 'MISSING' }}
-          - console.php: {{ 'EXISTS' if console_php_stat.stat.exists else 'MISSING' }}
-          - composer.json: {{ 'EXISTS' if composer_json_stat.stat.exists else 'MISSING' }}
-          - Git Branch: {{ git_branch }}
-          - Git Commit: {{ git_commit_hash.stdout | default('N/A') }}
-
-    - name: Fail if critical files are missing
-      fail:
-        msg: |
-          Critical files are missing after Git deployment:
-          {% if not worker_php_stat.stat.exists %}- worker.php{% endif %}
-          {% if not console_php_stat.stat.exists %}- console.php{% endif %}
-          {% if not composer_json_stat.stat.exists %}- composer.json{% endif %}
-      when: 
-        - not worker_php_stat.stat.exists or not console_php_stat.stat.exists or not composer_json_stat.stat.exists
-
+    - name: Include application deploy_code tasks
+      ansible.builtin.include_role:
+        name: application
+        tasks_from: deploy_code
+  tags:
+    - application
+    - deploy
+    - code