---
- name: Install unbound
  apt:
    package:
      - unbound
    state: 'latest'
    update_cache: yes
    cache_valid_time: 43200


- name: Copy unbound configuration snippets
  copy:
    src: '{{ item }}'
    dest: '/etc/unbound/unbound.conf.d/'
    owner: root
    group: root
    mode: 'u=rw,g=r,o=r'
  with_fileglob:
    - 'files/snippets/*.conf'


- name: Copy main unbound configuration
  template:
    src: '{{ lookup("hf", "unbound.conf") }}'
    dest: '/etc/unbound/unbound.conf'
    owner: root
    group: root
    mode: 'u=rw,g=r,o=r'
    validate: 'unbound-checkconf %s'
  notify:
    - restart unbound