Initialise repository structure and placeholder files. Generic functionality works i guess, need to come up with a better solution for compose templates

roles/docker/README.md

@@ -0,0 +1,8 @@
+# docker
+
+Installs Docker Engine from Docker's official Debian repository, configures
+`/etc/docker/daemon.json`, enables the service, and adds configured users to the
+`docker` group.
+
+Tags: `docker`, `packages`, `config`, `users`, `services`.
+

roles/docker/defaults/main.yml

@@ -0,0 +1,18 @@
+---
+docker_apt_key_url: https://download.docker.com/linux/debian/gpg
+docker_apt_key_path: /etc/apt/keyrings/docker.asc
+docker_apt_architecture: "{{ ansible_architecture | regex_replace('x86_64', 'amd64') | regex_replace('aarch64', 'arm64') }}"
+docker_apt_uri: https://download.docker.com/linux/debian
+docker_packages:
+  - docker-ce
+  - docker-ce-cli
+  - containerd.io
+  - docker-buildx-plugin
+  - docker-compose-plugin
+docker_daemon_config:
+  log-driver: local
+  live-restore: true
+  storage-driver: overlay2
+  iptables: true
+docker_service_state: started
+docker_service_enabled: true

roles/docker/files/.gitkeep

@@ -0,0 +1 @@
+

roles/docker/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+- name: restart docker
+  ansible.builtin.service:
+    name: docker
+    state: restarted
+

roles/docker/tasks/main.yml

@@ -0,0 +1,69 @@
+---
+- name: Ensure apt keyring directory exists
+  ansible.builtin.file:
+    path: /etc/apt/keyrings
+    state: directory
+    owner: root
+    group: root
+    mode: "0755"
+  tags: [docker, packages]
+
+- name: Install Docker repository signing key
+  ansible.builtin.get_url:
+    url: "{{ docker_apt_key_url }}"
+    dest: "{{ docker_apt_key_path }}"
+    owner: root
+    group: root
+    mode: "0644"
+  tags: [docker, packages]
+
+- name: Configure Docker apt repository
+  ansible.builtin.deb822_repository:
+    name: docker
+    types:
+      - deb
+    uris:
+      - "{{ docker_apt_uri }}"
+    suites:
+      - "{{ ansible_distribution_release }}"
+    components:
+      - stable
+    architectures:
+      - "{{ docker_apt_architecture }}"
+    signed_by: "{{ docker_apt_key_path }}"
+    state: present
+    enabled: true
+    install_python_debian: true
+  tags: [docker, packages]
+
+- name: Install Docker Engine and plugins
+  ansible.builtin.apt:
+    name: "{{ docker_packages }}"
+    state: present
+    update_cache: true
+  tags: [docker, packages]
+
+- name: Configure Docker daemon
+  ansible.builtin.copy:
+    dest: /etc/docker/daemon.json
+    owner: root
+    group: root
+    mode: "0644"
+    content: "{{ docker_daemon_config | to_nice_json }}\n"
+  notify: restart docker
+  tags: [docker, config]
+
+- name: Add users to docker group
+  ansible.builtin.user:
+    name: "{{ item }}"
+    groups: docker
+    append: true
+  loop: "{{ docker_users }}"
+  tags: [docker, users]
+
+- name: Enable Docker service
+  ansible.builtin.service:
+    name: docker
+    enabled: "{{ docker_service_enabled }}"
+    state: "{{ docker_service_state }}"
+  tags: [docker, services]

roles/docker/templates/.gitkeep

@@ -0,0 +1 @@
+