Graham McIntire
c64f59929e
Add an RPZ blocklist on the Unbound resolvers that returns NXDOMAIN for a set of domains (and subdomains) and logs only those matches under rpz-log tag "blocklist". Domains are templated from resolver_blocked_domains (single source of truth) into /etc/unbound/blocklist.rpz; respip module enabled for RPZ support. Fix deprecation warnings across the Ansible tree: - apt_repository -> deb822_repository (monitor, aprsc, uisp, grafana), removing stale .list files and adding update_cache where deb822 drops it - community.mysql.* -> ansible.mysql.* (monitor) and requirements.yml - top-level facts -> ansible_facts[...] (ansible_os_family, distribution_release, fqdn, architecture, default_ipv4) repo-wide
21 lines
No EOL
799 B
YAML
21 lines
No EOL
799 B
YAML
---
|
|
collections:
|
|
# Use latest versions - minimum versions ensure compatibility
|
|
- name: community.general
|
|
version: ">=12.0.0" # Updated from >=8.0.0 - current: 12.1.0
|
|
- name: ansible.posix
|
|
version: ">=2.0.0" # Added version constraint - current: 2.1.0
|
|
- name: kubernetes.core
|
|
version: ">=6.0.0" # Updated from >=2.4.0 - current: 6.2.0
|
|
- name: community.postgresql
|
|
version: ">=3.0.0" # Required for PostgreSQL management
|
|
- name: community.proxmox
|
|
version: ">=1.0.0" # Required for Proxmox VM management
|
|
- name: ansible.mysql
|
|
version: ">=5.0.0" # Required for Icinga2 MySQL management (renamed from community.mysql)
|
|
- name: netbox.netbox
|
|
version: ">=3.0.0" # Required for NetBox automation
|
|
|
|
roles:
|
|
- name: geerlingguy.postgresql
|
|
version: "3.4.3" |