tag plays in playbooks (instead of tasks in roles)
All checks were successful
/ Ansible Lint (pull_request) Successful in 3m18s
/ Ansible Lint (push) Successful in 2m20s

This commit is contained in:
June 2026-05-18 18:14:51 +02:00
commit 73e77bde70
Signed by: june
SSH key fingerprint: SHA256:o9EAq4Y9N9K0pBQeBTqhSDrND5E7oB+60ZNx0U1yPe0
10 changed files with 49 additions and 20 deletions

View file

@ -1,6 +1,5 @@
---
- name: Install knot
tags: [ auth-dns ]
become: true
ansible.builtin.package:
name:

View file

@ -1,6 +1,5 @@
---
- name: Ensure required directories exist
tags: [ auth-dns ]
become: true
loop: [ "/etc/knot", "/etc/knot/zones" ]
ansible.builtin.file:
@ -11,7 +10,6 @@
mode: u=rwx,g=rx,o=
- name: Deploy knot configuration file
tags: [ auth-dns ]
become: true
notify: reload knot
ansible.builtin.template:
@ -22,7 +20,6 @@
mode: u=rw,g=r,o=
- name: Deploy configured zones
tags: [ auth-dns ]
become: true
notify: reload knot
loop: "{{ knot__zones }}"
@ -42,7 +39,6 @@
# this results in outgoing zone transfers failing because knot will prefer to use the dynamic address over the statically configured one.
# so because we are configuring a DNS Nameserver where known IP-Addresses are actually important for ACL reasons, SLAAC is disabled
- name: Disable IPv6 SLAAC
tags: [ auth-dns ]
become: true
notify: netplan apply
ansible.builtin.template:

View file

@ -1,5 +1,4 @@
- name: Deploy knot-exporter systemd unit
tags: [ auth-dns ]
become: true
register: knot_deploy_service_file
notify: restart knot-exporter
@ -11,7 +10,6 @@
mode: u=rw,g=r,o=r
- name: Ensure knot-exporter is running and enabled
tags: [ auth-dns ]
become: true
ansible.builtin.systemd:
name: knot-exporter.service