---
- yum: name=unbound state=latest
  sudo: true
  tags:
    - packages

- yum: name=dnssec-trigger state=latest
  sudo: true
  tags:
    - packages
  when: '"gui" in group_names'

- file: path=/etc/unbound/{{ item }}/ state=directory mode=0755 owner=root group=unbound
  with_items:
  - local.d
  - conf.d
  sudo: True

- shell: curl -s '{{ ad_dnsbl }}'
  register: ad_hosts

- template: src=ad_servers.conf.j2
            dest=/etc/unbound/local.d/ad_servers.conf
            owner=root group=unbound mode=0644
  sudo: True
  notify:
    - restart unbound

- copy: src="{{ item }}" dest=/etc/unbound/{{ item }}
        owner=root group=unbound mode=0644
  sudo: True
  with_items:
  - unbound.conf
  - conf.d/redhat.com.conf
  notify:
    - restart unbound

---
- yum: name=unbound state=latest
  sudo: true
  tags:
    - packages

- yum: name="{{ item }}" state=latest
  sudo: true
  with_items:
  - dnssec-trigger
  - dnssec-trigger-panel
  tags:
    - packages
  when: '"gui" in group_names'

- file: path=/etc/unbound/{{ item }}/ state=directory mode=0755 owner=root group=unbound
  with_items:
  - local.d
  - conf.d
  sudo: True

- shell: curl -s '{{ ad_dnsbl }}'
  register: ad_hosts

- template: src=ad_servers.conf.j2
            dest=/etc/unbound/local.d/ad_servers.conf
            owner=root group=unbound mode=0644
  sudo: True
  notify:
    - restart unbound

- copy: src="{{ item }}" dest=/etc/unbound/{{ item }}
        owner=root group=unbound mode=0644
  sudo: True
  with_items:
  - unbound.conf
  - conf.d/redhat.com.conf
  notify:
    - restart unbound

Install dnssec-trigger-panel on GUI workstations
Install dnssec-trigger-panel on GUI workstations
