---
- include_tasks: versioncheck.yml
  when: submodules_versioncheck|bool

- name: Install unbound
  apt:
    package:
      - unbound
    state: 'latest'
    update_cache: yes
    cache_valid_time: 43200


- name: Copy unbound configuration snippets
  copy:
    src: '{{ item }}'
    dest: '/etc/unbound/unbound.conf.d/'
    owner: root
    group: root
    mode: 'u=rw,g=r,o=r'
  with_fileglob:
    - 'files/snippets/*.conf'
  notify:
    - unbound checkconf


- name: Copy main unbound configuration
  template:
    src: 'files/unbound.conf'
    dest: '/etc/unbound/unbound.conf'
    owner: root
    group: root
    mode: 'u=rw,g=r,o=r'
  notify:
    - unbound checkconf