Refactor Dockerfile for scraper, update Traefik configuration, and clean up scripts

- Simplified Dockerfile for scraper by removing unnecessary Node.js installation and optimizing build stages.
- Updated Traefik environment configuration to use shorter variable names for certificate paths.
- Removed commented-out middleware configurations in dynamic middlewares.yaml.
- Cleaned up legacy SSL configurations in ssl.yaml.
- Disabled insecure API access in Traefik configuration.
- Deleted unused renovate.json file.
- Modified update environment script to only process apps directory.
- Updated GHCR cleanup script to target specific package.
- Streamlined dependency update script to focus on app submodules.
- Removed setup script for Prometheus as it is no longer needed.

infra/traefik/TRAEFIK_ENV_CONFIG.md

@@ -8,13 +8,13 @@ All certificate paths support environment variable substitution with safe fallba
 
 ### Configuration Variables
 
-| Variable                              | Description                                                     | Default Path                                  | Purpose                                                 |
-| ------------------------------------- | --------------------------------------------------------------- | --------------------------------------------- | ------------------------------------------------------- |
-| `TRAEFIK_CONFIG_PATH`                 | Directory containing dynamic Traefik configuration files (YAML) | `/root/asepharyana-hub/infra/traefik/dynamic` | Location of middleware, router, and service definitions |
-| `TRAEFIK_CERT_ASEPHARYANA_MY_ID_PEM`  | Certificate file for asepharyana.my.id                          | `/root/asepharyana.my.id.pem`                 | SSL/TLS certificate for asepharyana.my.id domain        |
-| `TRAEFIK_CERT_ASEPHARYANA_MY_ID_KEY`  | Key file for asepharyana.my.id                                  | `/root/asepharyana.my.id.key`                 | SSL/TLS private key for asepharyana.my.id domain        |
-| `TRAEFIK_CERT_ASEPHARYANA_WEB_ID_PEM` | Certificate file for asepharyana.web.id                         | `/root/asepharyana.web.id.pem`                | SSL/TLS certificate for asepharyana.web.id domain       |
-| `TRAEFIK_CERT_ASEPHARYANA_WEB_ID_KEY` | Key file for asepharyana.web.id                                 | `/root/asepharyana.web.id.key`                | SSL/TLS private key for asepharyana.web.id domain       |
+| Variable                    | Description                                                     | Default Path                                    | Purpose                                                 |
+| --------------------------- | --------------------------------------------------------------- | ----------------------------------------------- | ------------------------------------------------------- |
+| `TRAEFIK_CONFIG_PATH`       | Directory containing dynamic Traefik configuration files (YAML) | `/root/asepharyana-hub/infra/traefik/dynamic`   | Location of middleware, router, and service definitions |
+| `TRAEFIK_CERT_MY_ID_PEM`    | Certificate file for asepharyana.my.id                          | `/root/asepharyana.my.id.pem`                   | SSL/TLS certificate for asepharyana.my.id domain        |
+| `TRAEFIK_CERT_MY_ID_KEY`    | Key file for asepharyana.my.id                                  | `/root/asepharyana.my.id.key`                   | SSL/TLS private key for asepharyana.my.id domain        |
+| `TRAEFIK_CERT_WEB_ID_PEM`   | Certificate file for asepharyana.web.id                         | `/root/asepharyana.web.id.pem`                  | SSL/TLS certificate for asepharyana.web.id domain       |
+| `TRAEFIK_CERT_WEB_ID_KEY`   | Key file for asepharyana.web.id                                 | `/root/asepharyana.web.id.key`                  | SSL/TLS private key for asepharyana.web.id domain       |
 
 ## Usage
 
@@ -42,10 +42,10 @@ Create or update your `.env` file in the deployment directory:
 
 ```env
 TRAEFIK_CONFIG_PATH=/root/asepharyana-hub/infra/traefik/dynamic
-TRAEFIK_CERT_ASEPHARYANA_MY_ID_PEM=/root/asepharyana.my.id.pem
-TRAEFIK_CERT_ASEPHARYANA_MY_ID_KEY=/root/asepharyana.my.id.key
-TRAEFIK_CERT_ASEPHARYANA_WEB_ID_PEM=/root/asepharyana.web.id.pem
-TRAEFIK_CERT_ASEPHARYANA_WEB_ID_KEY=/root/asepharyana.web.id.key
+TRAEFIK_CERT_MY_ID_PEM=/root/asepharyana.my.id.pem
+TRAEFIK_CERT_MY_ID_KEY=/root/asepharyana.my.id.key
+TRAEFIK_CERT_WEB_ID_PEM=/root/asepharyana.web.id.pem
+TRAEFIK_CERT_WEB_ID_KEY=/root/asepharyana.web.id.key
 ```
 
 Then deploy:

infra/traefik/dynamic/middlewares.yaml

@@ -65,8 +65,6 @@ http:
     common-chain:
       chain:
         middlewares:
-          # - real-ip
-          # - block-sensitive-paths
           - secure-headers
           - compress
           - retry

infra/traefik/dynamic/ssl.yaml

@@ -1,8 +1,5 @@
 tls:
   certificates:
-    # Legacy production layout: asephstech.pem is paired with asephscloud.key.
-    - certFile: /etc/traefik/certs/asephstech.pem
-      keyFile: /etc/traefik/certs/asephscloud.key
     - certFile: /etc/traefik/certs/asepharyana.my.id.pem
       keyFile: /etc/traefik/certs/asepharyana.my.id.key
     - certFile: /etc/traefik/certs/asepharyana.web.id.pem
@@ -10,5 +7,5 @@ tls:
   stores:
     default:
       defaultCertificate:
-        certFile: /etc/traefik/certs/asephstech.pem
-        keyFile: /etc/traefik/certs/asephscloud.key
+        certFile: /etc/traefik/certs/asepharyana.my.id.pem
+        keyFile: /etc/traefik/certs/asepharyana.my.id.key

infra/traefik/traefik.yaml

@@ -1,6 +1,6 @@
 api:
   dashboard: true
-  insecure: true
+  insecure: false
 
 log:
   level: INFO