fix: prevent CI jobs from restarting Traefik

- Add traefik_auto_restart check to fix-gitea-timeouts.yml
- Add traefik_auto_restart check to fix-gitea-ssl-routing.yml
- Add traefik_auto_restart check to fix-gitea-complete.yml
- Set traefik_auto_restart=false in all Gitea workflow Ansible calls
- Set gitea_auto_restart=false in all Gitea workflow Ansible calls
- Add redeploy-traefik-gitea.yml playbook for clean redeployment

This prevents CI/CD pipelines from causing Traefik restart loops by
ensuring all remediation playbooks respect the traefik_auto_restart
flag, which is set to false in group_vars/production/vars.yml.

deployment/ansible/playbooks/fix-gitea-timeouts.yml

@@ -0,0 +1,157 @@
+---
+# Fix Gitea Timeouts
+# Startet Gitea und Traefik neu, um Timeout-Probleme zu beheben
+- name: Fix Gitea Timeouts
+  hosts: production
+  gather_facts: yes
+  become: no
+
+  tasks:
+    - name: Check Gitea container status before restart
+      ansible.builtin.shell: |
+        cd /home/deploy/deployment/stacks/gitea
+        docker compose ps gitea
+      register: gitea_status_before
+      changed_when: false
+
+    - name: Display Gitea status before restart
+      ansible.builtin.debug:
+        msg: |
+          ================================================================================
+          Gitea Status (Before Restart):
+          ================================================================================
+          {{ gitea_status_before.stdout }}
+          ================================================================================
+
+    - name: Check Traefik container status before restart
+      ansible.builtin.shell: |
+        cd /home/deploy/deployment/stacks/traefik
+        docker compose ps traefik
+      register: traefik_status_before
+      changed_when: false
+
+    - name: Display Traefik status before restart
+      ansible.builtin.debug:
+        msg: |
+          ================================================================================
+          Traefik Status (Before Restart):
+          ================================================================================
+          {{ traefik_status_before.stdout }}
+          ================================================================================
+
+    - name: Restart Gitea container
+      ansible.builtin.shell: |
+        cd /home/deploy/deployment/stacks/gitea
+        docker compose restart gitea
+      register: gitea_restart
+      changed_when: gitea_restart.rc == 0
+
+    - name: Wait for Gitea to be ready
+      ansible.builtin.uri:
+        url: "https://git.michaelschiemer.de/api/healthz"
+        method: GET
+        status_code: [200]
+        validate_certs: false
+        timeout: 10
+      register: gitea_health_after_restart
+      until: gitea_health_after_restart.status == 200
+      retries: 30
+      delay: 2
+      changed_when: false
+      failed_when: false
+
+    - name: Display Gitea health after restart
+      ansible.builtin.debug:
+        msg: |
+          ================================================================================
+          Gitea Health After Restart:
+          ================================================================================
+          {% if gitea_health_after_restart.status == 200 %}
+          ✅ Gitea is healthy after restart
+          {% else %}
+          ⚠️  Gitea health check failed after restart (Status: {{ gitea_health_after_restart.status | default('TIMEOUT') }})
+          {% endif %}
+          ================================================================================
+
+    - name: Restart Traefik to refresh service discovery
+      ansible.builtin.shell: |
+        cd /home/deploy/deployment/stacks/traefik
+        docker compose restart traefik
+      register: traefik_restart
+      changed_when: traefik_restart.rc == 0
+      when: traefik_auto_restart | default(false) | bool
+
+    - name: Wait for Traefik to be ready
+      ansible.builtin.wait_for:
+        timeout: 30
+        delay: 2
+      changed_when: false
+
+    - name: Wait for Gitea to be reachable via Traefik
+      ansible.builtin.uri:
+        url: "https://git.michaelschiemer.de/api/healthz"
+        method: GET
+        status_code: [200]
+        validate_certs: false
+        timeout: 10
+      register: gitea_health_via_traefik
+      until: gitea_health_via_traefik.status == 200
+      retries: 30
+      delay: 2
+      changed_when: false
+      failed_when: false
+
+    - name: Check final Gitea container status
+      ansible.builtin.shell: |
+        cd /home/deploy/deployment/stacks/gitea
+        docker compose ps gitea
+      register: gitea_status_after
+      changed_when: false
+
+    - name: Check final Traefik container status
+      ansible.builtin.shell: |
+        cd /home/deploy/deployment/stacks/traefik
+        docker compose ps traefik
+      register: traefik_status_after
+      changed_when: false
+
+    - name: Test Gitea access via Traefik
+      ansible.builtin.uri:
+        url: "https://git.michaelschiemer.de/api/healthz"
+        method: GET
+        status_code: [200]
+        validate_certs: false
+        timeout: 10
+      register: final_gitea_test
+      changed_when: false
+      failed_when: false
+
+    - name: Summary
+      ansible.builtin.debug:
+        msg: |
+          ================================================================================
+          ZUSAMMENFASSUNG - Gitea Timeout Fix:
+          ================================================================================
+          
+          Gitea Restart: {% if gitea_restart.changed %}✅ Durchgeführt{% else %}ℹ️  Nicht nötig{% endif %}
+          Traefik Restart: {% if traefik_restart.changed %}✅ Durchgeführt{% else %}ℹ️  Nicht nötig{% endif %}
+          
+          Final Status:
+          - Gitea: {{ gitea_status_after.stdout | regex_replace('.*(Up|Down|Restarting).*', '\\1') | default('UNKNOWN') }}
+          - Traefik: {{ traefik_status_after.stdout | regex_replace('.*(Up|Down|Restarting).*', '\\1') | default('UNKNOWN') }}
+          - Gitea via Traefik: {% if final_gitea_test.status == 200 %}✅ Erreichbar{% else %}❌ Nicht erreichbar (Status: {{ final_gitea_test.status | default('TIMEOUT') }}){% endif %}
+          
+          {% if final_gitea_test.status == 200 %}
+          ✅ Gitea ist jetzt über Traefik erreichbar!
+          URL: https://git.michaelschiemer.de
+          {% else %}
+          ⚠️  Gitea ist noch nicht über Traefik erreichbar
+          
+          Nächste Schritte:
+          1. Prüfe Gitea-Logs: cd /home/deploy/deployment/stacks/gitea && docker compose logs gitea --tail=50
+          2. Prüfe Traefik-Logs: cd /home/deploy/deployment/stacks/traefik && docker compose logs traefik --tail=50
+          3. Prüfe Netzwerk: docker network inspect traefik-public | grep -A 5 gitea
+          4. Führe diagnose-gitea-timeouts.yml aus für detaillierte Diagnose
+          {% endif %}
+          
+          ================================================================================