From: Ralf Jung <post@ralfj.de>
Date: Thu, 10 May 2018 07:18:52 +0000 (+0200)
Subject: unbound: make sure unbound is loaded before the network is considered online
X-Git-Url: https://git.ralfj.de/ansible.git/commitdiff_plain/b006b6c851edb2d187ae0dd0463d53a07f5586bd?hp=5cd5c0e1307b681a6785062c3c0fdcaf776ae55e

unbound: make sure unbound is loaded before the network is considered online
---

diff --git a/roles/postfix/files/unbound/unbound.service.override b/roles/postfix/files/unbound/unbound.service.override
new file mode 100644
index 0000000..7c58381
--- /dev/null
+++ b/roles/postfix/files/unbound/unbound.service.override
@@ -0,0 +1,2 @@
+[Unit]
+Before=network-online.target
diff --git a/roles/postfix/tasks/unbound.yml b/roles/postfix/tasks/unbound.yml
index 34fbe81..0fe643c 100644
--- a/roles/postfix/tasks/unbound.yml
+++ b/roles/postfix/tasks/unbound.yml
@@ -3,10 +3,20 @@
   apt: name=unbound state=latest
 # configure
 - name: configure unbound
+  register: unbound_config
   copy:
     dest: /etc/unbound/unbound.conf.d/listen.conf
     src: files/unbound/listen.conf
-  register: unbound_config
+- name: configure systemd (create dir)
+  file: path=/etc/systemd/system/unbound.service.d state=directory
+- name: configure systemd (tweak unbound)
+  register: unbound_systemd
+  copy:
+    dest: /etc/systemd/system/unbound.service.d/override.conf
+    src: files/unbound/unbound.service.override
+- name: reload systemd
+  when: unbound_systemd.changed
+  command: systemctl daemon-reload
 - name: restart unbound
   # not a handler to make sure it succeeds before we go touch system DNS
   when: unbound_config.changed