- name: Install unbound
  package:
    name: "unbound"
    state: present

- name: Enable unbound service
  service:
    name: unbound
    enabled: yes
    state: started

- name: Permit traffic in default zone on port 53/udp
  ansible.posix.firewalld:
    port: 53/udp
    source: 192.0.1.0/24
    permanent: true
    state: enabled
    immediate: true
    offline: true

- name: Permit traffic in default zone on port 53/tcp
  ansible.posix.firewalld:
    port: 53/tcp
    source: 192.0.1.0/24
    permanent: true
    state: enabled
    immediate: true
    offline: true