Generate WordPress compose from the site list during provision.

Each host mounts wp-content and gets a compose file from inventory instead of a hand-copied one. Also allow LAN TCP 8020 so abc_voice is reachable through UFW.

inventory/group_vars/all.yml

@@ -14,9 +14,13 @@ ufw_allowed_tcp_ports:
 
 # LiveKit on webservers. Signaling stays LAN (NPM → :7880). UDP must be
 # reachable from the internet via router DNAT to the NPM upstream host.
+# 8020 is abc_voice. That process uses host networking, so Docker does not
+# publish the port and UFW drops it unless it is listed here. NPM
+# (abc.voice.aimloperations.com) reaches it from the LAN.
 ufw_lan_tcp_ports:
   - 7880
   - 7881
+  - 8020
 ufw_extra_udp_ports:
   - 3478
   - "50000:60000"