---
- name: install unbound prometheus exporter # FIXME: there is no prometheus-unbound-exporter in debian .deb exists in https://github.com/letsencrypt/unbound_exporter/releases/tag/v0.6.0
  become: true
  ansible.builtin.package:
    name: prometheus-unbound-exporter

- name: enable unbound prometheus exporter
  become: true
  ansible.builtin.systemd:
    name: prometheus-unbound-exporter.service
    enabled: true
    daemon_reload: true

- name: configure unbound exporter
  become: true
  ansible.builtin.copy:
    dest: /etc/conf.d/prometheus-unbound-exporter
    content: |
      UNBOUND_EXPORTER_ARGS="-unbound.ca "" -unbound.cert "" -unbound.host "unix:///run/unbound-control.sock"
    owner: root
    group: root
    mode: '0660'
  notify: prometheus-unbound-exporter.restarted