---
- name: Install unbound package
  dnf:
    name:
    - policycoreutils # needed for unbound-keygen.service
    - unbound
    state: present
  tags:
  - packages

- name: Configure unbound
  template:
    dest: '/etc/unbound/unbound.conf'
    src: unbound.conf.j2
    owner: root
    group: root
    mode: 0644
  notify:
  - restart unbound

- name: Enable unbound service
  systemd:
    name: unbound.service
    enabled: yes
    masked: no
    state: started
  when: not chroot
- name: '- when in chroot'
  command: systemctl enable unbound.service
  args:
    creates: '/etc/systemd/system/multi-user.target.wants/unbound.service'
  when: chroot

- name: Use our own resolver
  copy:
    dest: '/etc/resolv.conf'
    content: "nameserver 127.0.0.1\nnameserver ::1\n"
    owner: root
    group: root
    mode: 0644

# vim: set ts=2 sw=2 et: