dnsmasq.yml

#!/usr/bin/env ansible-playbook
---
- name: caching DNS setup
  hosts: pladd-laptop
  vars_files:
    - passwords.vault

###### NONE OF THIS IS NEEDED AS OF FEDORA 33 - IT USES systemd-resolved instead of dnsmasq


  tasks:
  - name: fail if vault not decrypted
    fail: msg="Vault not decrypted"
    when: ansible_become_password is undefined

  - name: dnsmasq package
    package: name={{ item }} state=latest
    with_items:
    - dnsmasq

  - name: NetworkManager config
    blockinfile:
      path: /etc/NetworkManager/conf.d/use-dnsmasq.conf
      create: yes
      block: |
        [main]
        dns=dnsmasq
    notify:
      - reload NetworkManager

  - name: dnsmasq_settings
    blockinfile:
      path: /etc/NetworkManager/dnsmasq.d/settings.conf
      create: yes
      block: |
        log-facility=/var/log/dnsmasq.log
        domain-needed
        bogus-priv
        strict-order
        local=/local/
        expand-hosts
    notify:
      - reload NetworkManager

  - name: debug_logging
    blockinfile:
      path: /etc/NetworkManager/dnsmasq.d/debug-logging.conf
      create: yes
      block: |
        log-queries=extra
    notify:
      - reload NetworkManager

  - name: rotate_debug_logs
    blockinfile:
      path: /etc/logrotate.d/dnsmasq
      create: yes
      block: |
        /var/log/dnsmasq.log {
          rotate 14
          daily
          notifempty
          maxsize 1G
          delaycompress
          sharedscripts
          postrotate
            [ ! -f /var/run/NetworkManager/dnsmasq.pid ] || kill -USR2 `cat /var/run/NetworkManager/dnsmasq.pid`
          endscript
        }

  - name: etc_hosts
    lineinfile:
      path: /etc/NetworkManager/dnsmasq.d/etc-hosts.conf
      create: yes
      line: addn-hosts=/etc/hosts
    notify:
      - reload NetworkManager

  - name: force_local_dns_for_home.pladd.net
    blockinfile:
      path: /etc/NetworkManager/dnsmasq.d/home.pladd.net.conf
      create: yes
      block: |
        server=/home.pladd.net/192.168.42.59
    notify:
      - reload NetworkManager

  # Used https://fedoramagazine.org/using-the-networkmanagers-dnsmasq-plugin/ for some parts

  handlers:
  - name: reload NetworkManager
    service:
      name: NetworkManager
      state: reloaded
...