Initial commit

tasks/setup.yaml

@@ -0,0 +1,111 @@
+---
+- name: "{{ app_name }} - Validate deployment requirements"
+  block:
+    - name: Verify Docker is available
+      ansible.builtin.command: docker --version
+      register: docker_check
+      failed_when: docker_check.rc != 0
+      changed_when: false
+
+    - name: Verify Docker Compose is available
+      ansible.builtin.command: docker compose version
+      register: compose_check
+      failed_when: compose_check.rc != 0
+      changed_when: false
+
+    - name: Validate required variables
+      ansible.builtin.assert:
+        that:
+          - app_name is defined
+          - app_name | length > 0
+          - app_name is match('^[a-zA-Z0-9_-]+$')
+          - host_root_path is defined
+          - host_root_path | length > 0
+          - host_root_path is match('^/[a-zA-Z0-9/_-]*$')
+        fail_msg: "Validation failed for {{ app_name | default('undefined') }}: Required variables missing or contain invalid characters. app_name and host_root_path must be defined and contain only alphanumeric, underscore, hyphen, and slash characters."
+
+    - name: Set compose source type
+      ansible.builtin.set_fact:
+        _compose_type: >-
+          {{
+            'template' if app_compose_template is not none else
+            'file' if app_compose_file is not none else
+            'content' if app_compose_content is not none else
+            'none'
+          }}
+
+    - name: Validate compose source
+      ansible.builtin.assert:
+        that:
+          - _compose_type != 'none'
+        fail_msg: "No Docker Compose source specified for {{ app_name }}: Must define one of app_compose_template, app_compose_file, or app_compose_content"
+
+    - name: Validate directory paths
+      ansible.builtin.assert:
+        that:
+          - app_dir is match('^/[a-zA-Z0-9/_-]*$')
+          - not (app_dir is match('.*\.\..*'))
+        fail_msg: "Security validation failed for {{ app_name }}: app_dir '{{ app_dir }}' contains invalid characters or path traversal sequences"
+
+    - name: Check if compose template exists
+      ansible.builtin.stat:
+        path: "{{ app_compose_template }}"
+      register: _compose_template_stat
+      delegate_to: localhost
+      become: false
+      when: app_compose_template is defined and app_compose_template | length > 0
+
+    - name: Assert compose template exists
+      ansible.builtin.assert:
+        that:
+          - _compose_template_stat.stat.exists
+        fail_msg: "Template file not found for {{ app_name }}: '{{ app_compose_template }}' does not exist"
+      when: app_compose_template is defined and app_compose_template | length > 0
+
+    - name: Check if compose file exists
+      ansible.builtin.stat:
+        path: "{{ app_compose_file }}"
+      register: _compose_file_stat
+      delegate_to: localhost
+      become: false
+      when: app_compose_file is defined and app_compose_file
+
+    - name: Assert compose file exists
+      ansible.builtin.assert:
+        that:
+          - _compose_file_stat.stat.exists
+        fail_msg: "Docker Compose file not found for {{ app_name }}: '{{ app_compose_file }}' does not exist"
+      when: app_compose_file is defined and app_compose_file
+  tags: [setup, deploy]
+
+- name: "{{ app_name }} - Create application directories"
+  block:
+    - name: Create application directory
+      ansible.builtin.file:
+        path: "{{ app_dir }}"
+        state: directory
+        owner: "{{ app_uid }}"
+        group: "{{ app_gid }}"
+        mode: "{{ app_permission_mode }}"
+
+    - name: Create application subdirectories
+      ansible.builtin.file:
+        path: "{{ item }}"
+        state: directory
+        owner: "{{ app_uid }}"
+        group: "{{ app_gid }}"
+        mode: "{{ app_permission_mode }}"
+      loop: "{{ app_subdirectories }}"
+  tags: [setup, deploy]
+
+- name: "{{ app_name }} - Deploy additional templates"
+  block:
+    - name: Copy over additional templates
+      ansible.builtin.template:
+        src: "{{ item.src }}"
+        dest: "{{ item.dest }}"
+        owner: "{{ app_uid }}"
+        group: "{{ app_gid }}"
+        mode: "{{ app_permission_mode }}"
+      loop: "{{ app_extra_templates }}"
+  tags: [setup, deploy]