add unbound config management

ansible/inventories/production/host_vars/rpi0.home.jthan.io/vars.yaml

@@ -0,0 +1,39 @@
+private_domains:
+  - home.jthan.io:
+    records:
+      - type: A
+        name: "router.home.jthan.io"
+        value: 192.168.1.1
+      - type: A
+        name: "rpi0.home.jthan.io"
+        value: 192.168.1.2
+      - type: A
+        name: "storage0.home.jthan.io"
+        value: 192.168.1.3
+      - type: A
+        name: "proxy0.home.jthan.io"
+        value: 192.168.1.7
+      - type: A
+        name: "authentik.home.jthan.io"
+        value: 192.168.1.7
+      - type: A
+        name: "cm.home.jthan.io"
+        value: 192.168.1.10
+      - type: AAAA
+        name: "storage0.home.jthan.io"
+        value: "2602:fb57:c20:b00:7a55:36ff:fe02:92c9"
+      - type: AAAA
+        name: "proxy0.home.jthan.io"
+        value: "2602:fb57:c20:b00:be24:11ff:fee6:8593"
+      - type: AAAA
+        name: "authentik.home.jthan.io"
+        value: "2602:fb57:c20:b00:be24:11ff:fee6:8593"
+      - type: AAAA
+        name: "cm.home.jthan.io"
+        value: "2602:fb57:c20:b00:be24:11ff:fe27:1368"
+      - type: CNAME
+        name: "ha.home.jthan.io"
+        value: "proxy0.home.jthan.io"
+      - type: CNAME
+        name: "vm0.home.jthan.io"
+        value: "proxy0.home.jthan.io"

ansible/roles/unbound/handlers/main.yaml

@@ -1,4 +1,4 @@
-- name: Restart nginx
+- name: Restart unbound
   service:
     name: unbound
     state: restarted

ansible/roles/unbound/tasks/main.yaml

@@ -10,6 +10,15 @@
     state: present
   when: ansible_os_family == "Archlinux"
 
+- name: Install unbound.conf
+  template:
+    src: templates/unbound.conf.j2
+    dest: /etc/unbound/unbound.conf
+    owner: root
+    group: root
+    mode: '0644'
+  notify: Restart unbound
+
 - name: Enable unbound service
   service:
     name: unbound