CCCHH/ansible-infra
CCCHH/ansible-infra
3
2
Fork 1
Code Issues 18 Pull requests 9 Wiki Activity Actions
ansible-infra/roles/unbound
History
bitwhisker ebdafb997f
 unbound(role): also over write fallback_dns in resolvd
2026-08-07 23:36:22 +02:00
..
defaults rt1(z9 host) unbound(role) kea_dhcp(role): create unbound and kea_dhcp role for rt1 2026-08-07 22:55:31 +02:00
files unbound(role): update readme and move task block to top level and remove unused 2026-08-07 22:55:57 +02:00
handlers unbound(role): update readme and move task block to top level and remove unused 2026-08-07 22:55:57 +02:00
tasks unbound(role): also over write fallback_dns in resolvd 2026-08-07 23:36:22 +02:00
templates unbound(role): fix unbound config template 2026-08-07 22:55:33 +02:00
README.md unbound(role): add config flag in README 2026-08-07 22:56:07 +02:00

README.md

Unbound DNS resolver

Role for a validating, recursive, caching DNS resolver based on Unbound. It is designed to be fast and lean and incorporates modern features based on open standards.

Role Customization

The following variables can be used to customize this role:

  • unbound_install_prometheus_exporter: Boolean of whether Unbound Exporter should also be installed to expose resolver statistics in prometheus format. Defaults to true.
  • unbound_bind_interfaces: List of interface names or IP addresseson which unbound will listen for dns queries. Defaults to [0.0.0.0, ::].
  • unbound_enable_unbound_control: Boolean of whether the remote control feature of unbound should be configured. Defaults to true.
  • unbound_enable_dnssec: Boolean of whether dnssec validation should be enabled. Defaults to true.
  • unbound_access_control: Required List of unbound access control values. Defaults to [].
  • unbound_disable_systemd_networkd: Boolean if true, systemd-networkd is disabled and the local system is pointed towards the configured dns resolver. Defaults to true.
  • unbound_thread_count: The number of threads unbound uses. Defaults to max vCPU Count.
  • unbound_private_domain: List of domains from witch unbound for the domain and its subdomains to allows resolving of RFC1918 addresses. (Not relevent on Debian) Defaults to []