PoC BunkerWeb 1.6.17 : docker-compose sur Proxmox, déployé par Ansible

Stack BunkerWeb (scheduler, UI, MariaDB, Redis), sites de test (nginx,
Juice Shop, go-httpbin), filtrage DOCKER-USER, script de tests, README
et schéma d'architecture.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

playbooks/render.yml

@@ -0,0 +1,36 @@
+---
+# Génère les fichiers compose dans build/<mode>/ sans rien déployer,
+# pour les relire ou les utiliser à la main : ansible-playbook playbooks/render.yml
+- name: Rendu local des fichiers compose
+  hosts: bunkerweb:apps
+  connection: local
+  gather_facts: false
+  vars:
+    ansible_become: false
+    render_dir: "{{ playbook_dir }}/../build/{{ poc_mode }}"
+    ansible_default_ipv4: { interface: ens18 }
+  tasks:
+    - name: Répertoires de sortie
+      ansible.builtin.file:
+        path: "{{ render_dir }}/{{ item }}"
+        state: directory
+        mode: "0755"
+      loop: [bunkerweb, apps]
+      run_once: true
+
+    - name: Compose BunkerWeb
+      ansible.builtin.template:
+        src: ../roles/bunkerweb/templates/compose.yml.j2
+        dest: "{{ render_dir }}/bunkerweb/compose.yml"
+        mode: "0600"
+      when: inventory_hostname in groups['bunkerweb']
+
+    - name: Compose applis et filtrage
+      ansible.builtin.template:
+        src: "../roles/apps/templates/{{ item.src }}"
+        dest: "{{ render_dir }}/apps/{{ item.dest }}"
+        mode: "0644"
+      loop:
+        - { src: compose.yml.j2, dest: compose.yml }
+        - { src: bwpoc-firewall.sh.j2, dest: bwpoc-firewall.sh }
+      when: inventory_hostname in groups['apps']