bitwhisker
aec4ea4090
- fix some indentation problems - fix access control - fix remote control unix socket and thrust anchor file (because debain appamour ist annoying) - add unbound-anchor package
52 lines
1.4 KiB
YAML
52 lines
1.4 KiB
YAML
- name: unbound role main
|
|
block:
|
|
|
|
- name: install unbound dns resolver
|
|
become: true
|
|
ansible.builtin.package:
|
|
name: unbound
|
|
|
|
- name: install unbound-anchor
|
|
become: true
|
|
ansible.builtin.package:
|
|
name: unbound-anchor
|
|
|
|
- name: ensure correct directory permissions
|
|
become: true
|
|
ansible.builtin.file:
|
|
path: /etc/unbound
|
|
state: directory
|
|
mode: u=rwX,g=rX,o=rX
|
|
recurse: true
|
|
owner: unbound
|
|
group: unbound
|
|
|
|
- name: configure unbound dns resolver
|
|
become: true
|
|
notify: unbound.restarted
|
|
ansible.builtin.template:
|
|
src: unbound.conf.j2
|
|
dest: /etc/unbound/unbound.conf
|
|
owner: unbound
|
|
group: unbound
|
|
mode: u=rw,g=r,o=r
|
|
|
|
- name: ensure unbound is running and enabled
|
|
become: true
|
|
ansible.builtin.systemd:
|
|
name: unbound.service
|
|
state: started
|
|
enabled: true
|
|
|
|
- name: disable systemd-resolved
|
|
when: unbound_disable_systemd_networkd
|
|
ansible.builtin.include_role:
|
|
name: deploy_systemd_resolved_config
|
|
vars:
|
|
deploy_systemd_resolved_config__enable: false
|
|
deploy_systemd_resolved_config__dns:
|
|
- 127.0.0.1
|
|
|
|
- name: install and configure prometheus-exporter for unbound
|
|
ansible.builtin.import_tasks: prometheus-exporter.yml
|
|
when: unbound_install_prometheus_exporter
|