Configure devigo service in production environment

- Added devigo role to production playbook
- Configured domains: devigo.no (apex), www.devigo.no, decap.jnss.me
- Set OAuth trusted origins for multi-domain support
- Integrated with existing Caddy and Podman infrastructure

group_vars/production/main.yml

@@ -3,7 +3,7 @@
 # Production Configuration for mini-vps (Client Projects)
 # =================================================================
 # This host runs production services requiring high uptime
-# Currently hosting: Sigvild Gallery
+# Currently hosting: Sigvild Gallery, Devigo
 
 # =================================================================
 # TLS Configuration - Production Setup
@@ -44,6 +44,25 @@ sigvild_gallery_pb_su_password: "{{ vault_pb_su_password}}"
 sigvild_gallery_host_password: "{{ vault_sigvild_host_password }}"
 sigvild_gallery_guest_password: "{{ vault_sigvild_guest_password }}"
 
+# =================================================================
+# Devigo Configuration (Docker-based deployment)
+# =================================================================
+devigo_domain: "devigo.no"
+devigo_www_domain: "www.devigo.no"
+devigo_primary_domain: "devigo.no"  # Apex is primary
+devigo_docker_dir: "/opt/devigo"
+devigo_ghcr_image: "ghcr.io/jnschaffer/rustan:prod"
+github_username: "{{ vault_github_username }}"
+github_token: "{{ vault_github_token }}"
+
+# Decap OAuth (integrated service)
+devigo_oauth_domain: "decap.jnss.me"
+devigo_oauth_client_id: "{{ vault_devigo_oauth_client_id }}"
+devigo_oauth_client_secret: "{{ vault_devigo_oauth_client_secret }}"
+devigo_oauth_trusted_origins:
+  - "https://devigo.no"
+  - "https://www.devigo.no"
+
 # =================================================================
 # Security & Logging
 # =================================================================

playbooks/production.yml

@@ -4,9 +4,11 @@
 # Deploys production services requiring high uptime to mini-vps including:
 # - Caddy web server
 # - Sigvild Gallery (wedding photo gallery)
+# - Devigo (sales training company website)
 #
 # Usage:
 #   ansible-playbook playbooks/production.yml
+#   ansible-playbook playbooks/production.yml --tags devigo
 
 # - import_playbook: security.yml
 
@@ -15,7 +17,7 @@
   become: true
   gather_facts: true
   
-  tasks:
+  pre_tasks:
     # Workaround: Manually load group_vars due to Ansible 2.20 variable loading issue
     - name: Load production group variables
       include_vars:
@@ -23,7 +25,9 @@
         extensions: ['yml']
       tags: always
   
-    - name: Deploy Sigvild Gallery
-      include_role:
-        name: sigvild-gallery
+  roles:
+    - role: devigo
+      tags: ['devigo', 'website', 'sales', 'oauth']
+    
+    - role: sigvild-gallery
       tags: ['sigvild', 'gallery', 'wedding']