infra/roles/name-resolution/tasks/main.yml

---
- name: Set openresolv to not configure /etc/resolv.conf
  ansible.builtin.lineinfile:
    path: /etc/resolvconf.conf
    regexp: '^resolvconf='
    line: 'resolvconf=NO'


- name: Configure DNS servers
  ansible.builtin.template:
    src: resolv.conf.j2
    dest: /etc/resolv.conf
    owner: root
    group: root
    mode: '0644'


- name: Install dhcp & dns packages
  ansible.builtin.package:
    name:
      - isc-dhcp-server
      - unbound
    update_cache: no
    state: present

- name: Create custom service folders
  ansible.builtin.file:
    path: /etc/systemd/system/{{ item }}.service.d
    state: directory
    owner: root
    group: root
    mode: '0755'
  loop:
    - isc-dhcp-server
    - unbound

#- name: Make services autorestart themselves on failure
#  template:
#    src: "custom-service-autorestart.j2"
##    dest: /etc/systemd/system/{{ item }}.service.d/autorestart.conf
#    owner: root
#    group: root
#    mode: '0644'
#  loop:
#    - isc-dhcp-server
#    - unbound
#  notify:
#    - Restart {{ item }}
#    - Reload systemd services

- name: Enable dhcpd and unbound services
  systemd:
    name: "{{ item }}"
    enabled: yes
  loop:
    - isc-dhcp-server
    - unbound


- name: Set dhcp to only run via ipv4
  ansible.builtin.lineinfile:
    path: /etc/default/isc-dhcp-server
    regexp: '^INTERFACESv4='
    line: 'INTERFACESv4="{{ dhcp_interface }}"'


- name: Copy dhcpd.conf
  template:
    src: dhcpd/dhcpd.conf.j2
    dest: /etc/dhcp/dhcpd.conf
    owner: root
    group: root
    mode: '0644'
  notify:
    - Restart dhcpd


#- name: Create unbound local.d directory
#  ansible.builtin.file:
#    path: /etc/unbound/local.d
#    state: directory
#    owner: root
#    group: unbound
#    mode: '0750'


- name: Copy unbound conf files
  template:
    src: "unbound/{{ item }}.j2"
    dest: /etc/unbound/unbound.conf.d/{{ item }}
    owner: root
    group: unbound
    mode: '0640'
  loop:
    - unbound.conf
    - local-domain.conf
    - plug-onion-addresses.conf
  notify:
    - Restart unbound

- name: Check adblock config file
  stat:
    path: /etc/unbound/unbound.conf.d/ad-servers.conf
  register: adservers_conf

- set_fact:
    adservers_conf_age_in_days: "{{ (lookup('pipe', 'date +%s')|int - adservers_conf.stat.ctime|int) / 86400 }}"
  when:
    - adservers_conf.stat.exists

- name: Download fresh adblock config
  get_url:
    url: 'https://pgl.yoyo.org/adservers/serverlist.php?hostformat=unbound&mimetype=plaintext'
    dest: /etc/unbound/unbound.conf.d/ad-servers.conf
    owner: root
    group: unbound
    mode: '0644'
  when:
    - not adservers_conf.stat.exists or adservers_conf_age_in_days|int > 30
  notify:
    - Restart unbound

- name: Update /etc/hosts
  template:
    src: hosts.j2
    dest: /etc/hosts
    owner: root
    group: root
    mode: '0644'