Update to 2022-01-12 10:14

This commit is contained in:
Daniel Berteaud
2022-01-12 10:14:43 +01:00
parent 898ae43de4
commit e73f05f073
22 changed files with 61 additions and 32 deletions

View File

@@ -4,18 +4,18 @@
yum:
name:
- unbound
tags: unbound
tags: dns
- name: Fetch the root hints
get_url:
url: https://www.internic.net/domain/named.cache
dest: /etc/unbound/root.hints
tags: unbound
tags: dns
- name: Deploy unbound configuration
template: src=unbound.conf.j2 dest=/etc/unbound/unbound.conf
notify: restart unbound
tags: unbound
tags: dns
- name: Handle port in the firewall
iptables_raw:
@@ -24,8 +24,8 @@
rules: "-A INPUT -m state --state NEW -p udp -m multiport --dports {{ unbound_port }} -s {{ unbound_src_ip | join(',') }} -j ACCEPT\n
-A INPUT -m state --state NEW -p tcp -m multiport --dports {{ unbound_port }} -s {{ unbound_src_ip | join(',') }} -j ACCEPT"
when: iptables_manage | default(True)
tags: [unbound,firewall]
tags: dns,firewall
- name: Start and enable the service
service: name=unbound state=started enabled=True
tags: unbound
tags: dns