Initial minecraft role

Paper/Java via itzg/minecraft-server in docker compose; whitelist and ops synchronized from Ansible, RCON on localhost only, explicit EULA flag.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

templates/opt/minecraft/.env.j2

@@ -0,0 +1,27 @@
+### BASIC ###
+EULA={{ minecraft_eula | bool | upper }}
+TYPE={{ minecraft_type }}
+VERSION={{ minecraft_version }}
+MEMORY={{ minecraft_memory }}
+TZ={{ cloud_tzdata }}
+ONLINE_MODE=TRUE
+
+### GAME ###
+MOTD={{ minecraft_motd }}
+DIFFICULTY={{ minecraft_difficulty }}
+MODE={{ minecraft_mode }}
+MAX_PLAYERS={{ minecraft_max_players }}
+VIEW_DISTANCE={{ minecraft_view_distance }}
+PVP={{ minecraft_pvp | bool | lower }}
+
+### ACCESS ###
+ENABLE_WHITELIST=TRUE
+ENFORCE_WHITELIST=TRUE
+EXISTING_WHITELIST_FILE=SYNCHRONIZE
+WHITELIST={{ minecraft_whitelist | join(',') }}
+EXISTING_OPS_FILE=SYNCHRONIZE
+OPS={{ minecraft_ops | join(',') }}
+
+### RCON ###
+ENABLE_RCON=TRUE
+RCON_PASSWORD='{{ minecraft_rcon_password }}'

templates/opt/minecraft/docker-compose.yml.j2

@@ -0,0 +1,16 @@
+name: minecraft
+services:
+  server:
+    image: {{ minecraft_image }}:{{ minecraft_image_tag }}
+    restart: unless-stopped
+    env_file:
+      - .env
+    ports:
+      - "{{ minecraft_port }}:25565"
+      - "127.0.0.1:{{ minecraft_rcon_port }}:25575"
+    volumes:
+      - {{ minecraft_data_location }}:/data
+    # give the server time to save the world on stop
+    stop_grace_period: 60s
+    tty: true
+    stdin_open: true