Graham McIntire
c64f59929e
Add an RPZ blocklist on the Unbound resolvers that returns NXDOMAIN for a set of domains (and subdomains) and logs only those matches under rpz-log tag "blocklist". Domains are templated from resolver_blocked_domains (single source of truth) into /etc/unbound/blocklist.rpz; respip module enabled for RPZ support. Fix deprecation warnings across the Ansible tree: - apt_repository -> deb822_repository (monitor, aprsc, uisp, grafana), removing stale .list files and adding update_cache where deb822 drops it - community.mysql.* -> ansible.mysql.* (monitor) and requirements.yml - top-level facts -> ansible_facts[...] (ansible_os_family, distribution_release, fqdn, architecture, default_ipv4) repo-wide
15 lines
431 B
YAML
15 lines
431 B
YAML
---
|
|
# Handler for the webtier: handlers are called by other plays.
|
|
# See http://docs.ansible.com/playbooks_intro.html for more information about handlers.
|
|
|
|
- name: Restart bind
|
|
ansible.builtin.service:
|
|
name: "{{ 'bind9' if ansible_facts['os_family'] == 'Debian' else 'named' }}"
|
|
state: restarted
|
|
become: true
|
|
|
|
- name: Restart firewalld
|
|
ansible.builtin.service:
|
|
name: firewalld
|
|
state: restarted
|
|
become: true
|