Refactor to reduce config in group_vars

roles/quadlets/traefik.yml

@@ -0,0 +1,73 @@
+quadlets:
+  - name: traefik
+    type: container
+    image: docker.io/traefik:latest
+    pull: newer
+    volumes:
+      - "{{ config_root }}/traefik:/etc/traefik:Z"
+    env:
+      TZ: "{{ tz }}"
+    command:
+      - "--api.dashboard=true"
+      - "--api.insecure=true"
+      - "--providers.file.directory=/etc/traefik/dynamic"
+      - "--providers.file.watch=true"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.websecure.address=:443"
+      - "--entrypoints.websecure.http.tls.certFile=/etc/traefik/server.crt"
+      - "--entrypoints.websecure.http.tls.keyFile=/etc/traefik/server.key"
+      - "--log.level=INFO"
+    restart_policy: on-failure
+
+configs:
+  - path: "{{ config_root }}/traefik/server.crt"
+    template: {{ traefik_server_cert }}
+  - path: "{{ config_root }}/traefik/server.key"
+    template: {{ traefik_server_key }}
+  - path: "{{ config_root }}/traefik/dynamic/dynamic.yml"
+    template: |
+      ---
+      http:
+        middlewares:
+          redirect-https:
+            redirectScheme:
+              scheme: https
+              permanent: true
+
+        routers:
+          redirect-to-https:
+            rule: "HostRegexp(`{any:.*}`)"
+            entryPoints:
+              - web
+            middlewares:
+              - redirect-https
+            service: noop
+
+      {% for app_name in traefik_enabled_apps %}
+          {{ app_name }}:
+            rule: "PathPrefix(`/{{ app_name }}`)"
+            service: {{ app_name }}
+            entryPoints:
+              - websecure
+            tls: {}
+      {% endfor %}
+
+          dashboard:
+            rule: "PathPrefix(`/dashboard`)"
+            service: api@internal
+            entryPoints:
+              - websecure
+            tls: {}
+
+        services:
+          noop:
+            loadBalancer:
+              servers:
+                - url: "http://localhost"
+
+      {% for app_name in traefik_enabled_apps %}
+          {{ app_name }}:
+            loadBalancer:
+              servers:
+                - url: "http://localhost:{{ lookup('vars', app_name).port }}"
+      {% endfor %}