added minecraft server role

roles/minecraft/tasks/main.yml

@@ -0,0 +1,35 @@
+---
+# Paper Minecraft server with Geyser (Bedrock<->Java bridge) + Floodgate (Bedrock auth without Java account).
+# Java players: mc.boxswapper.io:25565 (TCP); Bedrock players: mc.boxswapper.io:19132 (UDP) - Geyser translates, Floodgate authenticates.
+# External prerequisites (NOT managed by this repo):
+#   - Cloudflare A record mc.boxswapper.io -> public IP (grey-cloud, like vpn.boxswapper.io)
+#   - Router port forwards: TCP 25565 + UDP 19132 -> 10.10.0.45
+- name: Deploy Minecraft Server
+  containers.podman.podman_container:
+    image: docker.io/itzg/minecraft-server:latest
+    name: minecraft
+    env:
+      EULA: "TRUE"
+      TYPE: PAPER
+      VERSION: "{{ minecraft_version }}"
+      MEMORY: "{{ minecraft_memory }}"
+      MOTD: "{{ minecraft_motd }}"
+      DIFFICULTY: "{{ minecraft_difficulty }}"
+      GAMEMODE: "{{ minecraft_gamemode }}"
+      MAX_PLAYERS: "{{ minecraft_max_players }}"
+      VIEW_DISTANCE: "{{ minecraft_view_distance }}"
+      ONLINE_MODE: "{{ minecraft_online_mode }}"
+      PLUGINS: "{{ minecraft_plugins | join(',') }}"
+    restart_policy: always
+    recreate: true
+    state: started
+    volumes:
+      - /opt/apps/minecraft/data:/data:z
+      - /usr/share/zoneinfo/America/Denver:/etc/timezone:ro
+      - /etc/localtime:/etc/localtime:ro
+    ports:
+      - "25565:25565"
+      - "19132:19132/udp"
+    network:
+      - npm_internal
+    ip: '{{ minecraft_ip }}'