From d7f75c04da928e544a34f25a1d5cd156e4bab752 Mon Sep 17 00:00:00 2001
From: Bert-Jan Fikse <bert-jan@whatwedo.ch>
Date: Thu, 22 Jan 2026 17:32:39 +0100
Subject: [PATCH] chore(traefik): rename variables for clarity

---
 .../group_vars/traefik_servers_backend.yml    |  8 +++---
 .../group_vars/traefik_servers_dmz.yml        | 26 +++++++++----------
 .../vagrant/host_vars/backend/traefik.yml     |  8 +++---
 .../vagrant/host_vars/backend2/traefik.yml    |  4 +--
 4 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/inventories/vagrant/group_vars/traefik_servers_backend.yml b/inventories/vagrant/group_vars/traefik_servers_backend.yml
index 70c5e8f..c28eb89 100644
--- a/inventories/vagrant/group_vars/traefik_servers_backend.yml
+++ b/inventories/vagrant/group_vars/traefik_servers_backend.yml
@@ -3,8 +3,8 @@
 # These use Docker provider for local service discovery
 
 traefik_mode: backend
-use_ssl: true
-cert_mode: "selfsigned"
-enable_dashboard: true
-log_level: DEBUG
+traefik_use_ssl: true
+traefik_cert_mode: "selfsigned"
+traefik_enable_dashboard: true
+traefik_log_level: DEBUG
 traefik_network: proxy
\ No newline at end of file
diff --git a/inventories/vagrant/group_vars/traefik_servers_dmz.yml b/inventories/vagrant/group_vars/traefik_servers_dmz.yml
index b46126a..fdc8e48 100644
--- a/inventories/vagrant/group_vars/traefik_servers_dmz.yml
+++ b/inventories/vagrant/group_vars/traefik_servers_dmz.yml
@@ -3,23 +3,23 @@
 # These are public-facing proxies that route traffic to backend servers
 
 traefik_mode: dmz
-use_ssl: true
-cert_mode: "selfsigned"  # Use 'acme' for production
-enable_dashboard: true
-dashboard_domain: "traefik.dmz.local.test"
-log_level: DEBUG
+traefik_use_ssl: true
+traefik_cert_mode: "selfsigned"  # Use 'acme' for production
+traefik_enable_dashboard: true
+traefik_dashboard_domain: "traefik.dmz.local.test"
+traefik_log_level: DEBUG
 traefik_network: proxy
 
 # Backend servers to proxy (if empty, proxies to all backend_servers)
 # This allows multiple DMZ proxies to handle different backend servers
-# backend_servers_to_proxy:
+# traefik_backend_servers_to_proxy:
 #   - backend1
 #   - backend2
 
-# ACME configuration (uncomment for production with cert_mode: acme)
-# ssl_email: "admin@example.com"
-# ssl_cert_resolver: "dns"
-# acme_dns_zone: "digitalboard._acme.digitalboard.ch."
-# acme_dns_nameserver: "192.168.1.1:53"
-# acme_tsig_key: "your-tsig-key-name"
-# acme_tsig_secret: "your-tsig-secret"
\ No newline at end of file
+# ACME configuration (uncomment for production with traefik_cert_mode: acme)
+# traefik_ssl_email: "admin@example.com"
+# traefik_ssl_cert_resolver: "dns"
+# traefik_acme_dns_zone: "digitalboard._acme.digitalboard.ch."
+# traefik_acme_dns_nameserver: "192.168.1.1:53"
+# traefik_acme_tsig_key: "your-tsig-key-name"
+# traefik_acme_tsig_secret: "your-tsig-secret"
\ No newline at end of file
diff --git a/inventories/vagrant/host_vars/backend/traefik.yml b/inventories/vagrant/host_vars/backend/traefik.yml
index d4928df..5aa720e 100644
--- a/inventories/vagrant/host_vars/backend/traefik.yml
+++ b/inventories/vagrant/host_vars/backend/traefik.yml
@@ -1,5 +1,5 @@
 # Services to be exposed through the DMZ reverse proxy
-traefik_services:
+traefik_dmz_exposed_services:
   - name: httpbin
     domain: httpbin.local.test
     port: 443
@@ -35,7 +35,7 @@ traefik_services:
   #   port: 80
   #   protocol: http
 
-use_ssl: false # disable SSL redirect for vagrant
+traefik_use_ssl: false # disable SSL redirect for vagrant
 
-use_ssl_dashboard: true  # still use SSL for dashboard
-dashboard_domain: "traefik.backend.local.test"
\ No newline at end of file
+traefik_use_ssl_dashboard: true  # still use SSL for dashboard
+traefik_dashboard_domain: "traefik.backend.local.test"
\ No newline at end of file
diff --git a/inventories/vagrant/host_vars/backend2/traefik.yml b/inventories/vagrant/host_vars/backend2/traefik.yml
index 6837810..56ee12b 100644
--- a/inventories/vagrant/host_vars/backend2/traefik.yml
+++ b/inventories/vagrant/host_vars/backend2/traefik.yml
@@ -1,8 +1,8 @@
 # Services to be exposed through the DMZ reverse proxy
-traefik_services:
+traefik_dmz_exposed_services:
   - name: httpbin-srv2
     domain: "{{ httpbin_domain }}"
     port: 443
     protocol: https
 
-dashboard_domain: "traefik.backend2.local.test"
\ No newline at end of file
+traefik_dashboard_domain: "traefik.backend2.local.test"
\ No newline at end of file