Project Requirements

Deploy Ansible scripts to two hosts: Mulder and Scully.
Use a Git repository for version control of the Ansible playbooks.
Manage SSH keys securely within the project.
Deploy Gitea on Mulder.
Deploy Keycloak on Scully.
Apply a common set of configurations to both hosts.
Set up a reverse proxy with Nginx on Scully.
Secure all web services with HTTPS and Let's Encrypt certificates.
Access services via subdomains (e.g., gitea.my-url.com, keycloak.my-url.com).
Provide a web interface for managing WireGuard.
The user wants to be involved in the planning process and approve all changes before they are applied.