fix: Gitea Traefik routing and connection pool optimization

- Remove middleware reference from Gitea Traefik labels (caused routing issues)
- Optimize Gitea connection pool settings (MAX_IDLE_CONNS=30, authentication_timeout=180s)
- Add explicit service reference in Traefik labels
- Fix intermittent 504 timeouts by improving PostgreSQL connection handling

Fixes Gitea unreachability via git.michaelschiemer.de

deployment/ansible/roles/application/defaults/main.yml

@@ -1,11 +1,15 @@
 ---
-# Source path for application stack files on the control node
-# Use playbook_dir as base, then go to ../stacks/application
+# Source path for production stack files on the control node
+# Use playbook_dir as base, then go to ../stacks/production
 # This assumes playbooks are in deployment/ansible/playbooks
-application_stack_src: "{{ playbook_dir | default(role_path + '/..') }}/../stacks/application"
+# Note: Use ~ for string concatenation in Jinja2 templates
+# Note: Don't use application_stack_src in the default chain to avoid recursion
+application_stack_src: "{{ (playbook_dir | default(role_path + '/..') | dirname | dirname | dirname) ~ '/stacks/production' }}"
 
 # Destination path on the target host (defaults to configured app_stack_path)
-application_stack_dest: "{{ app_stack_path | default(stacks_base_path + '/application') }}"
+# Note: Don't use application_stack_dest in the default chain to avoid recursion
+# Note: Use ~ for string concatenation in Jinja2 templates
+application_stack_dest: "{{ app_stack_path | default((stacks_base_path | default('/home/deploy/deployment/stacks')) ~ '/production') }}"
 
 # Template used to generate the application .env file
 application_env_template: "{{ role_path }}/../../templates/application.env.j2"
@@ -44,3 +48,69 @@ application_compose_suffix: "{{ 'staging.yml' if application_environment == 'sta
 
 # Service names based on environment
 application_service_name: "{{ 'staging-app' if application_environment == 'staging' else 'php' }}"
+application_php_service_name: "{{ application_service_name }}"
+
+# Code Deployment Configuration
+application_code_dest: "/home/deploy/michaelschiemer/current"
+application_deployment_method: "git"  # Options: git, rsync
+application_git_repository_url_default: "https://git.michaelschiemer.de/michael/michaelschiemer.git"
+application_git_branch: "{{ 'staging' if application_environment == 'staging' else 'main' }}"
+application_git_retries: 5
+application_git_retry_delay: 10
+application_rsync_source: "{{ playbook_dir | default('') | dirname | dirname | dirname }}"
+application_rsync_opts:
+  - "--chmod=D755,F644"
+  - "--exclude=.git"
+  - "--exclude=.gitignore"
+  - "--exclude=node_modules"
+  - "--exclude=vendor"
+  - "--exclude=.env"
+  - "--exclude=.env.*"
+  - "--exclude=*.log"
+  - "--exclude=.idea"
+  - "--exclude=.vscode"
+  - "--exclude=.DS_Store"
+  - "--exclude=*.swp"
+  - "--exclude=*.swo"
+  - "--exclude=*~"
+  - "--exclude=.phpunit.result.cache"
+  - "--exclude=coverage"
+  - "--exclude=.phpunit.cache"
+  - "--exclude=public/assets"
+  - "--exclude=storage/logs"
+  - "--exclude=storage/framework/cache"
+  - "--exclude=storage/framework/sessions"
+  - "--exclude=storage/framework/views"
+  - "--exclude=deployment"
+  - "--exclude=docker"
+  - "--exclude=.deployment-archive-*"
+  - "--exclude=docs"
+  - "--exclude=tests"
+application_php_scripts:
+  - worker.php
+  - console.php
+application_critical_files:
+  - worker.php
+  - console.php
+  - composer.json
+
+# Composer Configuration
+application_restart_workers_after_composer: true
+
+# Container Management Configuration
+application_container_action: "fix"  # Options: fix, fix-web, recreate, recreate-with-env, sync-recreate
+application_container_target_services: "queue-worker scheduler"
+application_container_status_services: "queue-worker web scheduler php"
+application_container_stabilize_wait: 5
+
+# Health Check Configuration
+application_health_check_logs_tail: 20
+application_health_check_final: false
+application_show_status: true
+
+# Logs Configuration
+application_logs_tail: 50
+application_logs_check_vendor: true
+application_logs_check_permissions: true
+application_logs_check_files: true
+application_logs_list_files: false