feat: HA ingress with keepalived and traefik

ansible/inventories/group_vars/all/main.yml

@@ -7,11 +7,10 @@ proxmox_node: "pve"
 template_name: "debian-13-cloudinit"
 
 ansible_user: root
-ansible_python_interpreter: /opt/homebrew/bin/python3
 
 docker_packages:
   - docker.io
-  - docker-compose-plugin
+  - docker-compose
 
 # Traefik configuration
 domain: "example.com"  # Change to your domain

ansible/inventories/production.yml

@@ -2,6 +2,7 @@ all:
   hosts:
     localhost:
       ansible_connection: local
+      ansible_python_interpreter: /opt/homebrew/bin/python3
   children:
     edge:
       hosts:

ansible/roles/base/tasks/main.yml

@@ -10,11 +10,7 @@
       - vim
       - curl
       - git
-      - software-properties-common
+      - apt-transport-https
+      - ca-certificates
+      - gnupg
     state: present
-
-- name: Ensure user is in docker group
-  ansible.builtin.user:
-    name: "{{ ansible_user }}"
-    groups: docker
-    append: yes

ansible/roles/docker/tasks/main.yml

@@ -9,3 +9,9 @@
     name: docker
     state: started
     enabled: yes
+
+- name: Add user to docker group
+  ansible.builtin.user:
+    name: "{{ ansible_user }}"
+    groups: docker
+    append: yes

ansible/roles/traefik/templates/traefik.yml.j2

@@ -1,6 +1,7 @@
 api:
   dashboard: true
   debug: true
+  insecure: true
 
 entryPoints:
   http:
@@ -12,6 +13,8 @@ entryPoints:
           scheme: https
   https:
     address: ":443"
+  traefik:
+    address: ":8080"
 
 serversTransport:
   insecureSkipVerify: true