infra/ansible/roles
Graham McIntire 86ae10d963
resolvers: tune unbound for performance and reliability
- so-reuseport: yes — kernel hashes UDP across the per-thread sockets
  instead of waking all threads, balancing load and improving headroom
- edns-buffer-size: 1232 — DNS Flag Day 2020 default, avoids IP
  fragmentation (retransmits/TCP fallback)
- serve-expired (RFC 8767) with 1800ms client timeout and 86400s stale
  ttl — fast answers from stale cache during upstream slowness/outages
2026-06-07 16:43:33 -05:00
..
alertmanager prom: add prometheus stack (prometheus, alertmanager, grafana, node_exporter) 2026-05-08 09:50:31 -05:00
almalinux update 2026-01-30 17:27:52 -06:00
aprsc resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
base resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
caddy resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
debian/tasks fix: resolve all logic bugs 2026-06-04 14:43:06 -05:00
dokku resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
firewall resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
general resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
grafana monitoring: collect Unbound metrics via Telegraf into Prometheus + Grafana 2026-06-07 13:34:24 -05:00
librenms fix: resolve best practice and lint violations 2026-06-04 14:34:23 -05:00
loki resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
monitor resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
netbox ansible: rewrite netbox role to match live netbox.vntx.net (bare-metal install) 2026-05-08 12:17:30 -05:00
node_exporter prom: add prometheus stack (prometheus, alertmanager, grafana, node_exporter) 2026-05-08 09:50:31 -05:00
ns resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00
pgbouncer updates 2026-05-20 12:06:54 -05:00
prometheus prom: add app-specific grafana dashboards + per-pod job override 2026-05-08 10:25:17 -05:00
resolvers resolvers: tune unbound for performance and reliability 2026-06-07 16:43:33 -05:00
tailscale/tasks fix idempotency across roles 2026-06-02 11:54:34 -05:00
telegraf telegraf: disable PrivateMounts in containers (fix LXC 226/NAMESPACE) 2026-06-07 13:38:26 -05:00
ubuntu update 2026-01-30 17:27:52 -06:00
uisp resolvers: NXDOMAIN blocklist via RPZ; fix Ansible deprecations 2026-06-07 10:32:42 -05:00