move roles

ansible/roles/traefik/defaults/main.yml

@@ -1,10 +0,0 @@
----
-# ------------------------------------------------------------------------------
-# FILE: roles/traefik/defaults/main.yml
-# ------------------------------------------------------------------------------
-
-# Directory on the host where Traefik files are deployed
-traefik_base_dir: /opt/docker/traefik
-
-# Cloudflare API token — MUST be set in vault
-traefik_cloudflare_api_token: ""

ansible/roles/traefik/handlers/main.yml

@@ -1,8 +0,0 @@
-# ------------------------------------------------------------------------------
-# FILE: roles/traefik/handlers/main.yml
-# ------------------------------------------------------------------------------
-
-- name: restart traefik
-  community.docker.docker_compose_v2:
-    project_src: "{{ traefik_base_dir }}"
-    state: restarted

ansible/roles/traefik/tasks/main.yml

@@ -1,55 +0,0 @@
-# ------------------------------------------------------------------------------
-# FILE: roles/traefik/tasks/main.yml
-# DESCRIPTION: Deploys Traefik from boilerplate-generated files in the repo.
-#              The compose.yaml and dynamic config live in boilerplates/traefik/
-#              and are copied to the host. Only the .env file is templated
-#              to inject secrets from Ansible vault.
-# ------------------------------------------------------------------------------
-
-- name: Create Traefik directory structure
-  file:
-    path: "{{ item }}"
-    state: directory
-    owner: "{{ ansible_user }}"
-    group: docker
-    mode: '0775'
-  loop:
-    - "{{ traefik_base_dir }}"
-    - "{{ traefik_base_dir }}/dynamic"
-
-- name: Copy compose.yaml from boilerplate
-  copy:
-    src: "{{ playbook_dir }}/../../boilerplates/traefik/compose.yaml"
-    dest: "{{ traefik_base_dir }}/compose.yaml"
-    owner: "{{ ansible_user }}"
-    group: docker
-    mode: '0644'
-  notify: restart traefik
-
-- name: Copy dynamic configuration from boilerplate
-  copy:
-    src: "{{ playbook_dir }}/../../boilerplates/traefik/dynamic/"
-    dest: "{{ traefik_base_dir }}/dynamic/"
-    owner: "{{ ansible_user }}"
-    group: docker
-    mode: '0644'
-  notify: restart traefik
-
-- name: Deploy .env with secrets from vault
-  template:
-    src: env.j2
-    dest: "{{ traefik_base_dir }}/.env"
-    owner: "{{ ansible_user }}"
-    group: docker
-    mode: '0600'
-  notify: restart traefik
-
-- name: Create Traefik Docker network
-  docker_network:
-    name: proxy
-    state: present
-
-- name: Start Traefik
-  community.docker.docker_compose_v2:
-    project_src: "{{ traefik_base_dir }}"
-    state: present

ansible/roles/traefik/templates/env.j2

@@ -1,2 +0,0 @@
-# Managed by Ansible — do not edit manually
-CF_DNS_API_TOKEN={{ traefik_cloudflare_api_token }}