initial commit

roles/php/handlers/main.yml

@@ -0,0 +1,6 @@
+---
+- name: Restart PHP-FPM
+  ansible.builtin.service:
+    name: "php{{ php_version }}-fpm.service"
+    state: restarted
+...

roles/php/tasks/main.yml

@@ -0,0 +1,32 @@
+---
+- name: Install PHP extensions
+  ansible.builtin.apt:
+    name:
+      - "php{{ php_version }}-fpm"
+
+      # Required
+      - "php{{ php_version }}-common"
+      - php-json
+      - "php{{ php_version }}-xml"
+      - "php{{ php_version }}-curl"
+      - "php{{ php_version }}-gd"
+      - "php{{ php_version }}-intl"
+      - "php{{ php_version }}-mysql"
+
+      # Optional
+      - "php{{ php_version }}-bz2"
+      - "php{{ php_version }}-zip"
+      - "php{{ php_version }}-ldap"
+      - "php{{ php_version }}-mbstring"
+
+- name: Configure session.cookie_secure on php.ini to on
+  ansible.builtin.replace:
+    path: "/etc/php/{{ php_version }}/fpm/php.ini"
+    regexp: "^(;)?({{ item }} =)( (on|off))?$"
+    replace: "{{ item }} = on"
+  loop:
+    - session.cookie_secure
+    - session.cookie_httponly
+  notify:
+    - Restart PHP-FPM
+...

roles/php/vars/main.yml

@@ -0,0 +1,3 @@
+---
+php_version: '8.2'
+...