Initialise repository structure and placeholder files. Generic functionality works i guess, need to come up with a better solution for compose templates

roles/docker_app/tasks/main.yml

@@ -0,0 +1,62 @@
+---
+- name: Validate Docker app image is configured
+  ansible.builtin.assert:
+    that:
+      - docker_app_image | length > 0
+    fail_msg: "docker_app_image must be configured for {{ docker_app_name }}."
+  tags: [docker_app]
+
+- name: Create Docker app directories
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: directory
+    owner: root
+    group: root
+    mode: "0755"
+  loop: "{{ docker_app_directories }}"
+  tags: [docker_app]
+
+- name: Ensure proxy network exists
+  community.docker.docker_network:
+    name: "{{ docker_app_traefik_network }}"
+    state: present
+  when:
+    - docker_app_routing_mode == "traefik"
+    - docker_app_network_mode | length == 0
+  tags: [docker_app, docker]
+
+- name: Render Docker app environment
+  ansible.builtin.template:
+    src: "{{ docker_app_env_template_src }}"
+    dest: "{{ docker_app_dir }}/.env"
+    owner: root
+    group: root
+    mode: "0600"
+  no_log: true
+  tags: [docker_app, config]
+
+- name: Render Docker app Compose file
+  ansible.builtin.template:
+    src: "{{ docker_app_compose_template_src }}"
+    dest: "{{ docker_app_dir }}/compose.yaml"
+    owner: root
+    group: root
+    mode: "0644"
+  notify: restart docker app
+  tags: [docker_app, compose]
+
+- name: Allow Docker app host ports
+  community.general.ufw:
+    rule: allow
+    port: "{{ item.host | default(item.container) }}"
+    proto: "{{ item.protocol | default('tcp') }}"
+  loop: "{{ docker_app_ufw_ports }}"
+  when: docker_app_routing_mode == "host"
+  tags: [docker_app, firewall]
+
+- name: Start Docker app
+  community.docker.docker_compose_v2:
+    project_src: "{{ docker_app_dir }}"
+    state: present
+    pull: "{{ docker_app_pull }}"
+  tags: [docker_app, compose]