https://github.com/capnspacehook/ansible-unbound
Simple, opinionated ansible role to install unbound
https://github.com/capnspacehook/ansible-unbound
Last synced: about 1 year ago
JSON representation
Simple, opinionated ansible role to install unbound
- Host: GitHub
- URL: https://github.com/capnspacehook/ansible-unbound
- Owner: capnspacehook
- License: mit
- Created: 2020-11-30T23:19:16.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2021-12-30T16:14:36.000Z (over 4 years ago)
- Last Synced: 2025-01-28T22:31:35.077Z (over 1 year ago)
- Language: Jinja
- Size: 7.81 KB
- Stars: 1
- Watchers: 3
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
ansible-unbound
=========
A simple, opinionated ansible role to install unbound.
DNS-over-TLS is enforced, as well as DNSSEC. Some optional hardening
options are also enabled. Unbound is configured to listen locally only,
and `resolv.conf` is modified to send all local DNS requests to unbound.
Only port 853 over tcp needs to be allowed outbound for unbound to work
correctly.
Example Playbook
----------------
```yaml
- hosts: localhost
roles:
- capnspacehook.unbound
```
License
-------
MIT