77 lines
2.1 KiB
YAML
77 lines
2.1 KiB
YAML
---
|
|
|
|
- name: Set specific variables for distributions
|
|
ansible.builtin.include_vars: "{{ item }}"
|
|
with_first_found:
|
|
- files:
|
|
- '{{ ansible_distribution }}-{{ ansible_distribution_version }}.yml' # CentOS-6.5
|
|
- '{{ ansible_os_family }}-{{ ansible_distribution_version }}.yml' # RedHat-6.5
|
|
- '{{ ansible_distribution }}-{{ ansible_distribution_major_version }}.yml' # CentOS-6
|
|
- '{{ ansible_os_family }}-{{ ansible_distribution_major_version }}.yml' # RedHat-6
|
|
- '{{ ansible_distribution }}.yml' # CentOS
|
|
- '{{ ansible_os_family }}.yml' # RedHat
|
|
- 'default.yml'
|
|
|
|
- name: Enhance socket buffer size in UDP
|
|
ansible.posix.sysctl:
|
|
name: "{{ item }}"
|
|
value: 4194304
|
|
reload: true
|
|
with_items:
|
|
- "net.core.rmem_max"
|
|
- "net.core.wmem_max"
|
|
|
|
- name: Install Unbound
|
|
ansible.builtin.apt:
|
|
name: "{{ unbound_package }}"
|
|
update_cache: true
|
|
state: present
|
|
when: ansible_os_family == "Debian"
|
|
|
|
- name: Setup service configuration
|
|
ansible.builtin.template:
|
|
src: unbound.conf.j2
|
|
dest: /etc/unbound/unbound.conf.d/custom.conf
|
|
owner: unbound
|
|
group: unbound
|
|
mode: "0755"
|
|
notify: Reload Unbound
|
|
|
|
- name: Set permission on conf directory
|
|
ansible.builtin.file:
|
|
path: /etc/unbound
|
|
owner: unbound
|
|
group: unbound
|
|
recurse: true
|
|
|
|
- name: Ensure service is enabled at boot and started
|
|
ansible.builtin.systemd_service:
|
|
name: "unbound"
|
|
enabled: true
|
|
state: started
|
|
|
|
- name: Deploy unbound exporter
|
|
ansible.builtin.copy:
|
|
src: unbound_exporter
|
|
dest: /usr/local/bin/unbound_exporter
|
|
mode: "0755"
|
|
|
|
- name: Deploy unbound exporter service
|
|
ansible.builtin.template:
|
|
src: unbound_exporter.service.j2
|
|
dest: /etc/systemd/system/unbound_exporter.service
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|
|
notify:
|
|
- Daemon reload
|
|
- Restart unbound exporter
|
|
|
|
- name: Deploy logrotate config file
|
|
ansible.builtin.copy:
|
|
src: logrotate
|
|
dest: /etc/logrotate.d/unbound
|
|
owner: root
|
|
group: root
|
|
mode: "0644"
|