feat: initial woodpecker ci server role setup

tasks/cleanup.yaml

@@ -0,0 +1,14 @@
+---
+
+# cleanup
+- name: "docker - prune all"
+  community.docker.docker_prune:
+    containers: true
+    images: true
+    networks: true
+    volumes: true
+    builder_cache: true
+
+- name: "docker - force prune"
+  ansible.builtin.command: "docker system prune --all --force --volumes"
+  changed_when: false

tasks/main.yaml

@@ -0,0 +1,9 @@
+---
+
+# install woodpecker
+- name: "install woodpecker"
+  ansible.builtin.import_tasks: "woodpecker.yaml"
+
+# cleanup docker
+- name: "cleanup docker"
+  ansible.builtin.import_tasks: "cleanup.yaml"

tasks/woodpecker.yaml

@@ -0,0 +1,68 @@
+---
+
+# create directories
+- name: "create woodpecker directories"
+  ansible.builtin.file:
+    path: "{{ item }}"
+    state: "directory"
+    owner: "1000"
+    group: "1000"
+    mode: "0755"
+  loop:
+    - "/mnt/woodpecker/data"
+
+# run woodpecker server
+- name: "run woodpecker server"
+  community.docker.docker_container:
+
+    # docker defaults
+    auto_remove: "no"
+    container_default_behavior: "no_defaults"
+    detach: "yes"
+    init: "no"
+    interactive: "no"
+    log_driver: "json-file"
+    log_options:
+      max-size: "10m"
+      max-file: "3"
+    memory: "0"
+    paused: "no"
+    privileged: "no"
+    pull: "always"
+    read_only: "no"
+    state: "started"
+    tty: "no"
+
+    # woodpecker server
+    name: "woodpecker-server"
+    image: "cr.simoncor.net/dockerhub/woodpeckerci/woodpecker-server:v3.5.1"
+    image_name_mismatch: "recreate"
+    restart_policy: "unless-stopped"
+    network_mode: "host"
+    volumes:
+      - "/mnt/woodpecker/data:/data"
+
+    ports:
+      - "8000:8000/tcp"
+
+    env:
+
+      # global
+      TZ: "{{ timezone }}"
+
+      # server
+      WOODPECKER_HOST: "https://ci.simoncor.net"
+      WOODPECKER_SERVER_ADDR: ":8000"
+
+      # database
+      WOODPECKER_DATABASE_DRIVER: "sqlite3"
+      WOODPECKER_DATABASE_DATASOURCE: "/data/woodpecker.db?_journal=WAL"
+
+      # forgejo integration
+      WOODPECKER_FORGEJO: "true"
+      WOODPECKER_FORGEJO_URL: "https://git.simoncor.net"
+      WOODPECKER_FORGEJO_CLIENT: "{{ woodpecker_forgejo_client }}"
+      WOODPECKER_FORGEJO_SECRET: "{{ woodpecker_forgejo_secret }}"
+
+      # agent secret
+      WOODPECKER_AGENT_SECRET: "{{ woodpecker_agent_secret }}"