Enhance infrastructure and application configurations

- Updated AGENTS.md to include new directories for execution plans and implemented feature reports.
- Modified Ansible host variables for dev-02 and gpu-01 to change API endpoints and add new configurations for Scaleway.
- Adjusted firewall rules in gpu-01 to allow HTTPS traffic instead of the previous Ollama port.
- Added OAuth2 proxy configurations to gpu-01 for enhanced security.
- Removed deprecated open-webui module from Terraform app configurations.
- Updated Terraform configurations to reflect changes in local variables and removed unused secrets.
- Created a new sectool.json file for CloudNS integration with Bitwarden.
- Enhanced SELinux configurations for nginx to allow connections to any port and added oauth2-proxy port.

ansible/roles/nginx_proxy/tasks/nginx.yml

@@ -44,3 +44,18 @@
   become: true
   ansible.builtin.command: restorecon -Rv /etc/letsencrypt
   changed_when: false
+
+- name: Set SELinux boolean to allow nginx to connect to any port
+  become: true
+  ansible.builtin.command: semanage boolean -m --on nginx_connect_any
+  failed_when: false
+  changed_when: false
+  when: ansible_selinux.status == "enabled"
+
+- name: Add oauth2-proxy port to SELinux http_port_t
+  become: true
+  ansible.builtin.command: >-
+    semanage port -a -t http_port_t -p tcp {{ nginx_proxy_oauth2_proxy_port }}
+  failed_when: false
+  changed_when: false
+  when: ansible_selinux.status == "enabled"