Michael Schiemer
36ef2a1e2c
Some checks failed
🚀 Build & Deploy Image / Determine Build Necessity (push) Failing after 10m14s
🚀 Build & Deploy Image / Build Runtime Base Image (push) Has been skipped
🚀 Build & Deploy Image / Build Docker Image (push) Has been skipped
🚀 Build & Deploy Image / Run Tests & Quality Checks (push) Has been skipped
🚀 Build & Deploy Image / Auto-deploy to Staging (push) Has been skipped
🚀 Build & Deploy Image / Auto-deploy to Production (push) Has been skipped
Security Vulnerability Scan / Check for Dependency Changes (push) Failing after 11m25s
Security Vulnerability Scan / Composer Security Audit (push) Has been cancelled
- Remove middleware reference from Gitea Traefik labels (caused routing issues) - Optimize Gitea connection pool settings (MAX_IDLE_CONNS=30, authentication_timeout=180s) - Add explicit service reference in Traefik labels - Fix intermittent 504 timeouts by improving PostgreSQL connection handling Fixes Gitea unreachability via git.michaelschiemer.de
20 lines
545 B
YAML
20 lines
545 B
YAML
---
|
|
# Setup Let's Encrypt SSL Certificates via Traefik
|
|
# Wrapper Playbook for traefik role ssl tasks
|
|
- hosts: production
|
|
gather_facts: yes
|
|
become: no
|
|
vars:
|
|
# ssl_domains and acme_email are defined in group_vars/production.yml
|
|
# Can be overridden via -e flag if needed
|
|
traefik_ssl_domains: "{{ ssl_domains | default([gitea_domain, app_domain]) }}"
|
|
tasks:
|
|
- name: Include traefik ssl tasks
|
|
ansible.builtin.include_role:
|
|
name: traefik
|
|
tasks_from: ssl
|
|
tags:
|
|
- traefik
|
|
- ssl
|
|
- certificates
|