Enhance infrastructure and application configurations

- Updated AGENTS.md to include new directories for execution plans and implemented feature reports.
- Modified Ansible host variables for dev-02 and gpu-01 to change API endpoints and add new configurations for Scaleway.
- Adjusted firewall rules in gpu-01 to allow HTTPS traffic instead of the previous Ollama port.
- Added OAuth2 proxy configurations to gpu-01 for enhanced security.
- Removed deprecated open-webui module from Terraform app configurations.
- Updated Terraform configurations to reflect changes in local variables and removed unused secrets.
- Created a new sectool.json file for CloudNS integration with Bitwarden.
- Enhanced SELinux configurations for nginx to allow connections to any port and added oauth2-proxy port.

terraform/apps/dev-01/apps.tf

@@ -1,14 +1,3 @@
-module "open-webui" {
-  source = "../../modules/apps/open-webui"
-
-  persistent_folder = local.persistent_folder
-  fqdn              = local.open_webui_fqdn
-  llm_proxy         = local.llm_proxy
-  secret_key        = var.webui_secret_key
-  tag               = "v0.9.2-slim"
-  log_level         = local.open_webui_log_level
-}
-
 module "samba" {
   source = "../../modules/apps/samba"
 

terraform/apps/dev-01/config.tf

@@ -6,10 +6,6 @@ locals {
   lab_domain      = "lab.alexpires.me"
   internal_issuer = "internal-ca"
 
-  # open-webui
-  open_webui_fqdn      = "open-webui.${local.lab_domain}"
-  open_webui_log_level = "DEBUG"
-
   # samba
   samba_shares = [
     {
@@ -61,12 +57,7 @@ locals {
           type    = "CNAME"
           content = "dev-01.${local.lab_domain}."
         },
-        {
-          name    = "open-webui"
-          type    = "CNAME"
-          content = "dev-01.${local.lab_domain}."
-        },
-        {
+{
           name    = "smb"
           type    = "CNAME"
           content = "dev-01.${local.lab_domain}."
@@ -116,6 +107,11 @@ locals {
           type    = "A"
           content = "10.19.4.210"
         },
+        {
+          name    = "llm"
+          type    = "A"
+          content = "10.19.4.106"
+        },
         {
           name    = "ide"
           type    = "A"
@@ -180,14 +176,6 @@ locals {
     }
   }
 
-  llm_proxy = {
-    enabled = true
-    mac     = "04:7c:16:d6:63:66"
-    ip      = "10.19.4.106"
-    port    = 11434
-    scheme  = "http"
-  }
-
   llm_proxy_1 = {
     enabled = true
     mac     = "52:54:00:CD:DD:2E"

terraform/apps/dev-01/secrets.tf

@@ -22,12 +22,6 @@ variable "telegram_bot_token" {
   sensitive   = true
 }
 
-variable "webui_secret_key" {
-  description = "The secret key for WEBUI"
-  type        = string
-  sensitive   = true
-}
-
 variable "searxng_secret_key" {
   description = "The secret key for SearXNG"
   type        = string

terraform/apps/prod-01/config.tf

@@ -147,28 +147,6 @@ locals {
   }
 
   proxy_services = {
-    "open-webui" = {
-      http_port    = 8080
-      https_port   = 8443
-      tls          = true
-      resolver     = "10.19.4.136"
-      fqdn         = ["ai.alexpires.me"]
-      read_timeout = "1800"
-      send_timeout = "1800"
-      upstream     = "https://open-webui.lab.alexpires.me"
-      locations = [
-        {
-          path = "/ws/socket.io/"
-          headers = {
-            "Upgrade"    = "$http_upgrade"
-            "Connection" = "upgrade"
-          }
-        },
-        {
-          path = "/"
-        },
-      ]
-    },
     "nextcloud" = {
       http_port  = 8081
       https_port = 8444