chore(traefik): rename variables for clarity

inventories/vagrant/group_vars/traefik_servers_backend.yml

@@ -3,8 +3,8 @@
 # These use Docker provider for local service discovery
 
 traefik_mode: backend
-use_ssl: true
-cert_mode: "selfsigned"
-enable_dashboard: true
-log_level: DEBUG
+traefik_use_ssl: true
+traefik_cert_mode: "selfsigned"
+traefik_enable_dashboard: true
+traefik_log_level: DEBUG
 traefik_network: proxy

inventories/vagrant/group_vars/traefik_servers_dmz.yml

@@ -3,23 +3,23 @@
 # These are public-facing proxies that route traffic to backend servers
 
 traefik_mode: dmz
-use_ssl: true
-cert_mode: "selfsigned"  # Use 'acme' for production
-enable_dashboard: true
-dashboard_domain: "traefik.dmz.local.test"
-log_level: DEBUG
+traefik_use_ssl: true
+traefik_cert_mode: "selfsigned"  # Use 'acme' for production
+traefik_enable_dashboard: true
+traefik_dashboard_domain: "traefik.dmz.local.test"
+traefik_log_level: DEBUG
 traefik_network: proxy
 
 # Backend servers to proxy (if empty, proxies to all backend_servers)
 # This allows multiple DMZ proxies to handle different backend servers
-# backend_servers_to_proxy:
+# traefik_backend_servers_to_proxy:
 #   - backend1
 #   - backend2
 
-# ACME configuration (uncomment for production with cert_mode: acme)
-# ssl_email: "admin@example.com"
-# ssl_cert_resolver: "dns"
-# acme_dns_zone: "digitalboard._acme.digitalboard.ch."
-# acme_dns_nameserver: "192.168.1.1:53"
-# acme_tsig_key: "your-tsig-key-name"
-# acme_tsig_secret: "your-tsig-secret"
+# ACME configuration (uncomment for production with traefik_cert_mode: acme)
+# traefik_ssl_email: "admin@example.com"
+# traefik_ssl_cert_resolver: "dns"
+# traefik_acme_dns_zone: "digitalboard._acme.digitalboard.ch."
+# traefik_acme_dns_nameserver: "192.168.1.1:53"
+# traefik_acme_tsig_key: "your-tsig-key-name"
+# traefik_acme_tsig_secret: "your-tsig-secret"

inventories/vagrant/host_vars/backend/traefik.yml

@@ -1,5 +1,5 @@
 # Services to be exposed through the DMZ reverse proxy
-traefik_services:
+traefik_dmz_exposed_services:
   - name: httpbin
     domain: httpbin.local.test
     port: 443
@@ -35,7 +35,7 @@ traefik_services:
   #   port: 80
   #   protocol: http
 
-use_ssl: false # disable SSL redirect for vagrant
+traefik_use_ssl: false # disable SSL redirect for vagrant
 
-use_ssl_dashboard: true  # still use SSL for dashboard
-dashboard_domain: "traefik.backend.local.test"
+traefik_use_ssl_dashboard: true  # still use SSL for dashboard
+traefik_dashboard_domain: "traefik.backend.local.test"

inventories/vagrant/host_vars/backend2/traefik.yml

@@ -1,8 +1,8 @@
 # Services to be exposed through the DMZ reverse proxy
-traefik_services:
+traefik_dmz_exposed_services:
   - name: httpbin-srv2
     domain: "{{ httpbin_domain }}"
     port: 443
     protocol: https
 
-dashboard_domain: "traefik.backend2.local.test"
+traefik_dashboard_domain: "traefik.backend2.local.test"