proxies: add forge site/reverseproxy

Signed-off-by: Kevin Fenzi <kevin@scrye.com>

playbooks/include/proxies-reverseproxy.yml

@@ -1018,3 +1018,18 @@
     #ocp4_rdu3: true
     tags:
     - webhook2fedmsg
+
+  - role: httpd/reverseproxy
+    website: "forge{{ env_suffix }}.fedoraproject.org"
+    destname: forge
+    balancer_name: apps-ocp
+    balancer_members: "{{ (env == 'staging')|ternary(ocp_nodes_rdu3_stg, ocp_nodes) }}"
+    targettype: openshift
+    keephost: true
+    ocp4: "{{ (env == 'production') | bool }}"
+    ocp4_rdu3: "{{ (env == 'staging') | bool }}"
+    # When prod has moved to rdu3:
+    #ocp4: false
+    #ocp4_rdu3: true
+    tags:
+    - forge

playbooks/include/proxies-websites.yml

@@ -1287,3 +1287,9 @@
     tags:
     - riscv-koji
 
+  - role: httpd/website
+    site_name: "forge{{ env_suffix }}.fedoraproject.org"
+    sslonly: true
+    cert_name: "{{wildcard_cert_name}}"
+    tags:
+    - forge