ansible/roles/dns/application/tasks/main.yml

---

- name: Install required packages
  apt:
    state: present
    name:
      - bind9

- name: Create directories for zone databases
  file:
    path: "{{ item }}"
    state: directory
    owner: root
    group: "{{ dns_user }}"
    mode: "u=rwx,g=rx"
  loop:
    - "{{ zones_directory }}"
    - "{{ zones_environment_directory }}"

- name: Configure bind9 options
  template:
    src: named.conf.options
    dest: "{{ options_configuration }}"
    owner: root
    group: "{{ dns_user }}"
    mode: "u=rw,g=r,o=r"
  notify: reload bind9

- name: Enable bind9 service
  systemd:
    name: bind9
    state: started
    enabled: yes

- name: Allow dns in firewall
  ufw:
    rule: allow
    port: 53
    proto: "{{ item }}"
  loop:
    - tcp
    - udp