Complete production-ready Caddy infrastructure with security hardening

- Add comprehensive Caddy role with HTTPS/TLS, DNS challenges, and systemd security
- Implement optimized systemd overrides with enhanced security restrictions
- Create detailed documentation with usage examples and variable references
- Establish proper Ansible configuration with vault integration
- Update site.yml for infrastructure orchestration with role-based deployment
- Add host-specific configuration structure for scalable multi-environment setup
This commit is contained in:
2025-11-12 22:36:34 +01:00
parent 0b6eea6113
commit 7788410bfc
12 changed files with 795 additions and 3 deletions

15
roles/caddy/meta/main.yml Normal file
View File

@@ -0,0 +1,15 @@
---
galaxy_info:
role_name: caddy
author: rick-infra
description: Caddy web server and reverse proxy
min_ansible_version: 2.9
platforms:
- name: ArchLinux
versions:
- all
dependencies: []
collections:
- ansible.posix