chore: gitea-actions improvements, graylog/fluent-bit logging, zomboid mod

- Gitea actions: add handlers, improve deps and service template
- Graylog: simplify container config, add Caddy reverse proxy
- Add fluent-bit container for log forwarding
- Add ClimbDownRope mod (Workshop ID: 3000725405) to zomboid

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

ansible/roles/gitea-actions/handlers/main.yml

@@ -5,3 +5,10 @@
     name: act_runner
     state: restarted
     daemon_reload: true
+
+- name: restart podman socket
+  become: true
+  ansible.builtin.systemd:
+    name: podman.socket
+    state: restarted
+    daemon_reload: true

ansible/roles/gitea-actions/tasks/deps.yml

@@ -8,12 +8,31 @@
     state: present
   tags: gitea-actions
 
-- name: enable podman socket for gitea-runner
+- name: create podman socket override directory
+  become: true
+  ansible.builtin.file:
+    path: /etc/systemd/system/podman.socket.d
+    state: directory
+    mode: "0755"
+  tags: gitea-actions
+
+- name: configure podman socket for gitea-runner access
+  become: true
+  ansible.builtin.copy:
+    dest: /etc/systemd/system/podman.socket.d/override.conf
+    content: |
+      [Socket]
+      SocketMode=0660
+      SocketGroup={{ gitea_runner_user }}
+    mode: "0644"
+  notify: restart podman socket
+  tags: gitea-actions
+
+- name: enable system podman socket
   become: true
-  become_user: "{{ gitea_runner_user }}"
   ansible.builtin.systemd:
     name: podman.socket
+    daemon_reload: true
     enabled: true
     state: started
-    scope: user
   tags: gitea-actions

ansible/roles/gitea-actions/templates/act_runner.service.j2

@@ -1,7 +1,7 @@
 [Unit]
 Description=Gitea Actions runner
 Documentation=https://gitea.com/gitea/act_runner
-After=network.target
+After=network.target podman.socket
 
 [Service]
 ExecStart={{ act_runner_bin }} daemon --config {{ act_runner_config_dir }}/config.yaml
@@ -10,8 +10,7 @@ TimeoutSec=0
 RestartSec=10
 Restart=always
 User={{ gitea_runner_user }}
-Environment="XDG_RUNTIME_DIR=/run/user/%(uid)"
-Environment="DOCKER_HOST=unix:///run/user/%(uid)/podman/podman.sock"
+Environment="DOCKER_HOST=unix:///run/podman/podman.sock"
 
 [Install]
 WantedBy=multi-user.target

ansible/roles/gitea-actions/templates/config.yaml.j2

@@ -2,7 +2,7 @@ log:
   level: info
 
 runner:
-  file: .runner
+  file: {{ act_runner_work_dir }}/.runner
   capacity: 1
   timeout: 3h
   insecure: false