Graham McIntire
c64f59929e
Add an RPZ blocklist on the Unbound resolvers that returns NXDOMAIN for a set of domains (and subdomains) and logs only those matches under rpz-log tag "blocklist". Domains are templated from resolver_blocked_domains (single source of truth) into /etc/unbound/blocklist.rpz; respip module enabled for RPZ support. Fix deprecation warnings across the Ansible tree: - apt_repository -> deb822_repository (monitor, aprsc, uisp, grafana), removing stale .list files and adding update_cache where deb822 drops it - community.mysql.* -> ansible.mysql.* (monitor) and requirements.yml - top-level facts -> ansible_facts[...] (ansible_os_family, distribution_release, fqdn, architecture, default_ipv4) repo-wide |
||
|---|---|---|
| .. | ||
| alertmanager | ||
| almalinux | ||
| aprsc | ||
| base | ||
| caddy | ||
| debian/tasks | ||
| dokku | ||
| firewall | ||
| general | ||
| grafana | ||
| librenms | ||
| loki | ||
| monitor | ||
| netbox | ||
| node_exporter | ||
| ns | ||
| pgbouncer | ||
| prometheus | ||
| resolvers | ||
| tailscale/tasks | ||
| ubuntu | ||
| uisp | ||