- name: Reload unbound systemd: name: unbound state: reloaded - name: Enable unbound systemd: name: unbound enabled: yes state: started - name: Set unbound as default dns replace: path: /etc/resolv.conf regexp: "^nameserver.*$" replace: "nameserver 127.0.0.1" - name: Disable systemd-resolved systemd: name: systemd-resolved enabled: no state: stopped notify: - Enable unbound - Set unbound as default dns - name: Save netfilter rules command: argv: - '/usr/sbin/netfilter-persitent' - 'save'