From 0ecbb84fa5ef570e2a51d4ee0545067a61b92cde Mon Sep 17 00:00:00 2001
From: Joakim <joakim@jnss.me>
Date: Tue, 16 Dec 2025 00:53:39 +0100
Subject: [PATCH] Configure devigo service in production environment

- Added devigo role to production playbook
- Configured domains: devigo.no (apex), www.devigo.no, decap.jnss.me
- Set OAuth trusted origins for multi-domain support
- Integrated with existing Caddy and Podman infrastructure
---
 group_vars/production/main.yml | 21 ++++++++++++++++++++-
 playbooks/production.yml       | 12 ++++++++----
 2 files changed, 28 insertions(+), 5 deletions(-)

diff --git a/group_vars/production/main.yml b/group_vars/production/main.yml
index 0e29889..cdae7b3 100644
--- a/group_vars/production/main.yml
+++ b/group_vars/production/main.yml
@@ -3,7 +3,7 @@
 # Production Configuration for mini-vps (Client Projects)
 # =================================================================
 # This host runs production services requiring high uptime
-# Currently hosting: Sigvild Gallery
+# Currently hosting: Sigvild Gallery, Devigo
 
 # =================================================================
 # TLS Configuration - Production Setup
@@ -44,6 +44,25 @@ sigvild_gallery_pb_su_password: "{{ vault_pb_su_password}}"
 sigvild_gallery_host_password: "{{ vault_sigvild_host_password }}"
 sigvild_gallery_guest_password: "{{ vault_sigvild_guest_password }}"
 
+# =================================================================
+# Devigo Configuration (Docker-based deployment)
+# =================================================================
+devigo_domain: "devigo.no"
+devigo_www_domain: "www.devigo.no"
+devigo_primary_domain: "devigo.no"  # Apex is primary
+devigo_docker_dir: "/opt/devigo"
+devigo_ghcr_image: "ghcr.io/jnschaffer/rustan:prod"
+github_username: "{{ vault_github_username }}"
+github_token: "{{ vault_github_token }}"
+
+# Decap OAuth (integrated service)
+devigo_oauth_domain: "decap.jnss.me"
+devigo_oauth_client_id: "{{ vault_devigo_oauth_client_id }}"
+devigo_oauth_client_secret: "{{ vault_devigo_oauth_client_secret }}"
+devigo_oauth_trusted_origins:
+  - "https://devigo.no"
+  - "https://www.devigo.no"
+
 # =================================================================
 # Security & Logging
 # =================================================================
diff --git a/playbooks/production.yml b/playbooks/production.yml
index be00c9f..e82c2c7 100644
--- a/playbooks/production.yml
+++ b/playbooks/production.yml
@@ -4,9 +4,11 @@
 # Deploys production services requiring high uptime to mini-vps including:
 # - Caddy web server
 # - Sigvild Gallery (wedding photo gallery)
+# - Devigo (sales training company website)
 #
 # Usage:
 #   ansible-playbook playbooks/production.yml
+#   ansible-playbook playbooks/production.yml --tags devigo
 
 # - import_playbook: security.yml
 
@@ -15,15 +17,17 @@
   become: true
   gather_facts: true
   
-  tasks:
+  pre_tasks:
     # Workaround: Manually load group_vars due to Ansible 2.20 variable loading issue
     - name: Load production group variables
       include_vars:
         dir: "{{ playbook_dir }}/../group_vars/production"
         extensions: ['yml']
       tags: always
+  
+  roles:
+    - role: devigo
+      tags: ['devigo', 'website', 'sales', 'oauth']
     
-    - name: Deploy Sigvild Gallery
-      include_role:
-        name: sigvild-gallery
+    - role: sigvild-gallery
       tags: ['sigvild', 'gallery', 'wedding']