Add Template to deploy forgejo.

This template allows deploying a forgejo en either Scaleway or Hetzner
(untested) without much knowledge about them.
It DOES require knowledge about Terragrunt and ansible. A wizard of
sorts is provided but it will not guarantee success without some
knowledge about the underlying technology.

ansible/playbooks/vars/main.yml

@@ -0,0 +1,64 @@
+---
+# Main variables for Forgejo deployment
+# NOTE: Domain-specific settings should be in inventory/production/hosts.yml
+#       Variables here are lower-priority defaults only.
+
+# Forgejo version (can be overridden in inventory)
+# forgejo_version: "9.0.2"
+
+# Protocol for public URLs (https recommended)
+forgejo_protocol: https
+
+# System configuration
+forgejo_user: git
+forgejo_group: git
+forgejo_uid: 1100
+forgejo_gid: 1100
+
+# Installation paths
+forgejo_base_path: /opt/forgejo
+forgejo_data_path: "{{ forgejo_base_path }}/data"
+forgejo_config_path: "{{ forgejo_base_path }}/config"
+
+# Network ports
+forgejo_http_port: 3000
+forgejo_ssh_port: 2222
+
+# Database configuration
+forgejo_db_type: postgres
+forgejo_db_host: localhost
+forgejo_db_port: 5432
+forgejo_db_name: forgejo
+forgejo_db_user: forgejo
+
+# Redis configuration
+forgejo_use_redis: true
+redis_host: localhost
+redis_port: 6379
+
+# SSL/TLS configuration
+forgejo_enable_letsencrypt: true
+letsencrypt_email: "admin@{{ forgejo_domain }}"
+
+# Features (can be overridden in inventory)
+forgejo_enable_lfs: true
+forgejo_enable_2fa: true
+# forgejo_disable_registration - set in inventory
+# forgejo_require_signin_view - set in inventory
+
+# Backup configuration
+forgejo_enable_backups: true
+forgejo_backup_schedule: "0 2 * * *"
+forgejo_backup_retention_days: 30
+
+# Monitoring
+forgejo_enable_prometheus: false
+
+# Email configuration
+forgejo_enable_email: false
+
+# S3 configuration
+forgejo_enable_s3: false
+
+# Security
+forgejo_log_level: Info