From b3971199bd824daa2e0012866312497504762e6e Mon Sep 17 00:00:00 2001 From: Fabio Sinibaldi Date: Wed, 15 Jul 2026 17:38:45 +0200 Subject: [PATCH] define tasks --- .../playbooks/roles/vpn_dns/tasks/main.yaml | 32 +++++++++++++++++++ ansible/playbooks/vpn_server.yaml | 6 ++++ 2 files changed, 38 insertions(+) create mode 100644 ansible/playbooks/roles/vpn_dns/tasks/main.yaml diff --git a/ansible/playbooks/roles/vpn_dns/tasks/main.yaml b/ansible/playbooks/roles/vpn_dns/tasks/main.yaml new file mode 100644 index 0000000..0fcea55 --- /dev/null +++ b/ansible/playbooks/roles/vpn_dns/tasks/main.yaml @@ -0,0 +1,32 @@ +--- +- name: Preparing hosts + vars: + vpn_dns_hosts: [] + set_fact: + vpn_dns_hosts: "{{vpn_dns_hosts + [{'name': item.name, 'ip': (item.ip | split('/'))[0] }] }}" + loop: "{{wg_peers + [{'name': 'ns1', 'ip':wg_server_address}] }}" + + +- name: Preparing bind zones + set_fact: + bind_zones : "{{ bind_zones | combine ({'primaries':[(wg_server_address | split ('/'))[0]], 'hosts':vpn_dns_hosts}) }}" + +- name: Import role Bind + vars: + bind_listen: + ipv4: + - port: 53 + addresses: + - "127.0.0.1" + - "{{ (wg_server_address | split ('/'))[0] }}" + - port: 5353 + addresses: + - "127.0.1.1" + ansible.builtin.import_role: + name: bodsch.dns.bind + +- name: Start a service + become: True + ansible.builtin.systemd: + name: named + state: restarted diff --git a/ansible/playbooks/vpn_server.yaml b/ansible/playbooks/vpn_server.yaml index 3b1af8e..afa3dc0 100644 --- a/ansible/playbooks/vpn_server.yaml +++ b/ansible/playbooks/vpn_server.yaml @@ -2,5 +2,11 @@ - name: Configure VPN Server hosts: wireguard_server become: true + debugger: on_failed roles: - wireguard_server + tasks: + - name: Import role vpn_dns + ansible.builtin.import_role: + name: vpn_dns + when: dns_server is defined and dns_server \ No newline at end of file