X-Git-Url: https://git.ralfj.de/ansible.git/blobdiff_plain/ee0707947ed908dfcba302f36dacc330316382d8..2cff34d2e4709f556449d235ad915454c93bb24c:/roles/unbound/tasks/main.yml

diff --git a/roles/unbound/tasks/main.yml b/roles/unbound/tasks/main.yml
index c53cecb..f3aacac 100644
--- a/roles/unbound/tasks/main.yml
+++ b/roles/unbound/tasks/main.yml
@@ -32,5 +32,14 @@
     src: files/dhclient.conf
 - name: configure system DNS
   copy:
-    dest: /etc/resolv.conf
-    content: "nameserver 127.0.0.2\n"
+    dest: "{{ item }}"
+    content: "nameserver 127.0.0.2\noptions trust-ad\noptions edns0\n"
+  loop:
+  - /etc/resolv.conf.unbound
+  - /etc/resolv.conf
+# some providers need extra hacks to make our DNS persistent
+- name: install DNS-fix cronjob
+  template:
+    dest: /etc/cron.hourly/fix-dns
+    src: templates/fix-dns
+    mode: +x