fix(ansible): Prevent Traefik and Gitea restart loops

- Set traefik_auto_restart: false in group_vars to prevent automatic restarts after config deployment
- Set traefik_ssl_restart: false to prevent automatic restarts during SSL certificate setup
- Set gitea_auto_restart: false to prevent automatic restarts when healthcheck fails
- Modify traefik/tasks/ssl.yml to only restart if explicitly requested or acme.json was created
- Modify traefik/tasks/config.yml to respect traefik_auto_restart flag
- Modify gitea/tasks/restart.yml to respect gitea_auto_restart flag
- Add verify-traefik-fix.yml playbook to monitor Traefik stability

This fixes the issue where Traefik was restarting every minute due to
automatic restart mechanisms triggered by config deployments and health checks.
The restart loops caused 504 Gateway Timeouts for Gitea and other services.

Fixes: Traefik restart loop causing service unavailability

deployment/ansible/roles/traefik/tasks/config.yml

@@ -0,0 +1,78 @@
+---
+# Deploy Traefik Configuration Files
+
+- name: Check if local Traefik config directory exists
+  ansible.builtin.stat:
+    path: "{{ traefik_local_config_path }}"
+  register: local_traefik_exists
+  delegate_to: localhost
+  run_once: true
+
+- name: Fail if local Traefik config directory does not exist
+  ansible.builtin.fail:
+    msg: "Local Traefik config directory not found at {{ traefik_local_config_path }}"
+  when: not local_traefik_exists.stat.exists
+  delegate_to: localhost
+  run_once: true
+
+- name: Check if remote Traefik stack directory exists
+  ansible.builtin.stat:
+    path: "{{ traefik_stack_path }}"
+  register: traefik_stack_exists
+
+- name: Fail if remote Traefik stack directory does not exist
+  ansible.builtin.fail:
+    msg: "Remote Traefik stack directory not found at {{ traefik_stack_path }}"
+  when: not traefik_stack_exists.stat.exists
+
+- name: Deploy docker-compose.yml
+  ansible.builtin.copy:
+    src: "{{ traefik_local_config_path }}/docker-compose.yml"
+    dest: "{{ traefik_stack_path }}/docker-compose.yml"
+    mode: '0644'
+    owner: "{{ ansible_user }}"
+    group: "{{ ansible_user }}"
+  register: docker_compose_deployed
+
+- name: Deploy traefik.yml
+  ansible.builtin.copy:
+    src: "{{ traefik_local_config_path }}/traefik.yml"
+    dest: "{{ traefik_stack_path }}/traefik.yml"
+    mode: '0644'
+    owner: "{{ ansible_user }}"
+    group: "{{ ansible_user }}"
+  register: traefik_yml_deployed
+
+- name: Display deployment status
+  ansible.builtin.debug:
+    msg: |
+      ========================================
+      Traefik Configuration Deployment
+      ========================================
+      docker-compose.yml: {{ '✅ DEPLOYED' if docker_compose_deployed.changed else 'ℹ️  No changes' }}
+      traefik.yml: {{ '✅ DEPLOYED' if traefik_yml_deployed.changed else 'ℹ️  No changes' }}
+      ========================================
+      
+      {% if docker_compose_deployed.changed or traefik_yml_deployed.changed %}
+      ✅ Configuration files deployed successfully!
+      
+      {% if traefik_auto_restart | default(true) | bool %}
+      Next: Traefik will be restarted automatically to apply changes.
+      {% else %}
+      Next step: Restart Traefik to apply changes:
+      ansible-playbook -i inventory/production.yml playbooks/restart-traefik.yml --vault-password-file secrets/.vault_pass
+      {% endif %}
+      {% else %}
+      ℹ️  Configuration files are already up to date.
+      {% endif %}
+  when: traefik_show_status | default(true) | bool
+
+- name: Restart Traefik after config deployment
+  include_tasks: restart.yml
+  when:
+    - (docker_compose_deployed.changed or traefik_yml_deployed.changed)
+    - traefik_auto_restart | default(true) | bool
+  vars:
+    traefik_restart_action: restart
+    traefik_show_status: false
+