static-website: add basic role for static deployments

static-website/defaults/main.yml

+---
+
+static_websites: []
+#  - path: /var/www/website
+#    git_url: ''
+#    umask: 022
+#    git_version: HEAD
+#    deploy_key: "{{ inventory_dir }}/files/deploy-keys/website"

static-website/tasks/main.yml

+---
+
+- name: ensure the deploy keys are available
+  copy:
+    src: "{{ item.deploy_key }}"
+    dest: "/root/.ssh/{{ item.deploy_key|basename }}"
+    owner: root
+    group: root
+    mode: 0600
+  when:
+    - item.deploy_key is defined
+    - item.deploy_key != ''
+  with_items: "{{ static_websites }}"
+  tags:
+    - static-website
+
+# https://github.com/ansible/ansible/issues/27699
+- name: ensure git module is able to clone
+  command: mount -o remount,exec /tmp
+  tags:
+    - static-website
+
+- name: ensure we have up-to-date websites
+  git:
+    repo: "{{ item.git_url }}"
+    dest: "{{ item.path }}"
+    key_file: "/root/.ssh/{{ item.deploy_key|default(None, true)|basename or omit }}"
+    version: "{{ item.git_version|default('HEAD') }}"
+    umask: "{{ item.umask|default('022') }}"
+  with_items: "{{ static_websites }}"
+  tags:
+    - static-website
+
+- name: ensure git module is not able to clone anymore
+  command: mount -o remount,noexec /tmp
+  tags:
+    - static-website
+