Complete production-ready Caddy infrastructure with security hardening

- Add comprehensive Caddy role with HTTPS/TLS, DNS challenges, and systemd security - Implement optimized systemd overrides with enhanced security restrictions - Create detailed documentation with usage examples and variable references - Establish proper Ansible configuration with vault integration - Update site.yml for infrastructure orchestration with role-based deployment - Add host-specific configuration structure for scalable multi-environment setup
2025-11-12 22:36:34 +01:00
parent 0b6eea6113
commit 7788410bfc
12 changed files with 795 additions and 3 deletions
--- a/roles/caddy/templates/index.html.j2
+++ b/roles/caddy/templates/index.html.j2
@@ -0,0 +1,68 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Welcome to jnss</title>
+    <style>
+        body { 
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+            max-width: 800px; 
+            margin: 0 auto; 
+            padding: 2rem; 
+            background: linear-gradient(135deg, #667eea 0%, #764ba2 100%);
+            color: white;
+            min-height: 100vh;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+        }
+        .container {
+            text-align: center;
+            background: rgba(255,255,255,0.1);
+            padding: 3rem;
+            border-radius: 20px;
+            backdrop-filter: blur(10px);
+            border: 1px solid rgba(255,255,255,0.2);
+        }
+        h1 { 
+            font-size: 3rem; 
+            margin-bottom: 1rem;
+            text-shadow: 2px 2px 4px rgba(0,0,0,0.3);
+        }
+        p { 
+            font-size: 1.2rem; 
+            opacity: 0.9;
+            margin: 1rem 0;
+        }
+        .status { 
+            background: rgba(0,255,0,0.2); 
+            padding: 1rem; 
+            border-radius: 10px; 
+            margin: 2rem 0;
+            border: 1px solid rgba(0,255,0,0.3);
+        }
+        .timestamp {
+            font-family: monospace;
+            font-size: 0.9rem;
+            opacity: 0.7;
+            margin-top: 2rem;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <h1>Welcome to jnss</h1>
+        <p>🚀 Server infrastructure is online and secure</p>
+        <div class="status">
+            ✅ Caddy web server running<br>
+            🔒 Enterprise-grade security hardening active<br>
+            📊 Structured logging operational
+        </div>
+        <p>Infrastructure managed with Ansible</p>
+        <div class="timestamp">
+            Deployed: {{ ansible_facts['date_time']['iso8601'] }}
+        </div>
+    </div>
+</body>
+</html>