This repository has been archived on 2020-08-18. You can view files and clone it, but cannot push or open issues or pull requests.
2020-04-02 17:48:34 +00:00
|
|
|
- name: Copy configuration files
|
|
|
|
|
copy:
|
|
|
|
|
follow: yes
|
|
|
|
|
src: roles/dns/files/
|
|
|
|
|
dest: /etc/unbound/
|
|
|
|
|
notify:
|
2020-04-03 20:59:07 +00:00
|
|
|
- Reload unbound
|
2020-04-07 20:01:27 +00:00
|
|
|
- name: Install Unbound
|
|
|
|
|
apt:
|
|
|
|
|
install_recommends: no
|
|
|
|
|
name: unbound
|
|
|
|
|
state: present
|
|
|
|
|
cache_valid_time: 3600
|
|
|
|
|
notify: Disable systemd-resolved
|
2020-04-08 01:31:07 +00:00
|
|
|
when: unbound|bool == true
|
|
|
|
|
- name: Allow Unbound TCP through iptables
|
|
|
|
|
loop:
|
|
|
|
|
- ipv4
|
|
|
|
|
- ipv6
|
|
|
|
|
iptables:
|
|
|
|
|
chain: INPUT
|
|
|
|
|
ctstate:
|
|
|
|
|
- NEW
|
|
|
|
|
- ESTABLISHED
|
|
|
|
|
- RELATED
|
|
|
|
|
destination_port: "53"
|
|
|
|
|
jump: ACCEPT
|
|
|
|
|
ip_version: '{{ item }}'
|
|
|
|
|
protocol: tcp
|
|
|
|
|
notify:
|
|
|
|
|
- Save netfilter rules
|
|
|
|
|
- name: Allow Unbound UDP through iptables
|
|
|
|
|
loop:
|
|
|
|
|
- ipv4
|
|
|
|
|
- ipv6
|
|
|
|
|
iptables:
|
|
|
|
|
chain: INPUT
|
|
|
|
|
ctstate:
|
|
|
|
|
- NEW
|
|
|
|
|
- ESTABLISHED
|
|
|
|
|
- RELATED
|
|
|
|
|
destination_port: "53"
|
|
|
|
|
jump: ACCEPT
|
|
|
|
|
ip_version: '{{ item }}'
|
|
|
|
|
protocol: udp
|
|
|
|
|
notify:
|
|
|
|
|
- Save netfilter rules
|
