Refactor and enhance Ansible configurations for dev-02 and nginx proxy setup

- Updated host_vars for dev-02 to include login history settings and modified code server authentication.
- Adjusted opencode server configurations and reduced resource allocation.
- Introduced a new playbook for configuring nginx reverse proxy with TLS and OAuth2.
- Enhanced linux_dev_station role defaults and tasks, including package updates and service configurations.
- Removed unnecessary credential assertions in linux_dev_station tasks.
- Created nginx_proxy role with tasks for certbot, nginx installation, and oauth2-proxy setup.
- Added templates for nginx and oauth2-proxy configurations.
- Updated terraform configuration to reflect new DNS records for ide and agent services.
- Documented changes and configurations in linux_dev_station.md for clarity and future reference.

ansible/roles/linux_dev_station/tasks/main.yml

@@ -5,28 +5,6 @@
       - ansible_facts['distribution'] == "Fedora"
     fail_msg: "Role linux_dev_station supports Fedora hosts only"
 
-- name: Ensure OpenCode server credentials are provided
-  ansible.builtin.assert:
-    that:
-      - linux_dev_station_opencode_server_username | length > 0
-      - linux_dev_station_opencode_server_password | length > 0
-    fail_msg: >-
-      Set OPENCODE_SERVER_USERNAME and OPENCODE_SERVER_PASSWORD
-      in environment (recommended via sectool)
-      before running the playbook.
-  when: linux_dev_station_opencode_systemd_enabled | bool
-
-- name: Ensure code-server password is provided
-  ansible.builtin.assert:
-    that:
-      - linux_dev_station_code_server_password | length > 0
-    fail_msg: >-
-      Set CODE_SERVER_PASSWORD in environment
-      (recommended via sectool) before running the playbook.
-  when:
-    - linux_dev_station_code_server_systemd_enabled | bool
-    - linux_dev_station_code_server_auth == "password"
-
 - name: Install dnf packages
   become: true
   ansible.builtin.dnf: