feat: systemd, unbound, more packages, dots venv

ansible/roles/dns/tasks/main.yaml

@@ -0,0 +1,32 @@
+- name: Setup unbound config
+  become: true
+  copy:
+    src: "{{ home }}/.dots/config/unbound/unbound.conf"
+    dest: "/etc/unbound/unbound.conf"
+    owner: unbound
+    mode: "u=rwX,g=rX,o="
+
+- name: Setup unbound control certificates
+  become: true
+  shell: /usr/bin/unbound-control-setup
+
+- name: Specify resolv configuration to use the local unbound server
+  become: true
+  copy:
+    dest: /etc/resolv.conf
+    content: | 
+      nameserver ::1
+      nameserver 127.0.0.1
+
+- name: Protect resolv
+  become: true
+  file: 
+    path: /etc/resolv.conf
+    attributes: '+i'
+
+- name: Enable unbound service
+  become: true
+  ansible.builtin.systemd_service:
+    name: unbound
+    state: started
+    enabled: true