rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1

- create unbound role
- create kea_dhcp role
- configure unbound and keadhcp on rt1(z9 host)

roles/unbound/tasks/main.yml

@@ -0,0 +1,63 @@
+- name: unbound role main
+  tags: [ unbound, dns, dns_resolver ]
+  block:
+
+    - name: install unbound dns resolver
+      become: true
+      ansible.builtin.package:
+        name: unbound
+
+    - name: install extra dns tooling
+      become: true
+      ansible.builtin.package:
+        name: [ bind ]  # the bind package includes tools like dig in archlinux
+
+    - name: ensure correct directory permissions
+      become: true
+      ansible.builtin.file:
+        path: /etc/unbound
+        state: directory
+        mode: u=rwX,g=rX,o=rX
+        recurse: true
+        owner: unbound
+        group: unbound
+
+    - name: configure unbound dns resolver
+      become: true
+      notify: unbound.restarted
+      ansible.builtin.template:
+        src: unbound.conf.j2
+        dest: /etc/unbound/unbound.conf
+        owner: unbound
+        group: unbound
+        mode: u=rw,g=r,o=r
+
+    - name: ensure unbound is running and enabled
+      become: true
+      ansible.builtin.systemd:
+        name: unbound.service
+        state: started
+        enabled: true
+
+    - name: disable systemd-resolved
+      become: true
+      when: unbound_disable_systemd_networkd
+      ansible.builtin.systemd:
+        name: systemd-resolved.service
+        state: stopped
+        enabled: false
+
+    - name: configure system resolver to point to local unbound
+      become: true
+      when: unbound_disable_systemd_networkd
+      ansible.builtin.copy:
+        src: no-resolved.resolv.conf
+        dest: /etc/resolv.conf
+        owner: unbound
+        group: unbound
+        mode: u=rw,g=r,o=r
+
+
+    - name: install and configure prometheus-exporter for unbound
+      ansible.builtin.import_tasks: prometheus-exporter.yml
+      when: unbound_install_prometheus_exporter