init unbound

2025-12-28 13:44:10 -07:00
parent cb4b3cd6f1
commit dd0f7b9341
5 changed files with 43 additions and 0 deletions
--- a/ansible/roles/unbound/tasks/main.yaml
+++ b/ansible/roles/unbound/tasks/main.yaml
@@ -0,0 +1,28 @@
+- name: Install unbound
+  package:
+    name: "unbound"
+    state: present
+
+- name: Enable unbound service
+  service:
+    name: unbound
+    enabled: yes
+    state: started
+
+- name: Permit traffic in default zone on port 53/udp
+  ansible.posix.firewalld:
+    port: 53/udp
+    source: 192.0.1.0/24
+    permanent: true
+    state: enabled
+    immediate: true
+    offline: true
+
+- name: Permit traffic in default zone on port 53/tcp
+  ansible.posix.firewalld:
+    port: 53/tcp
+    source: 192.0.1.0/24
+    permanent: true
+    state: enabled
+    immediate: true
+    offline: true