prole/infrastructure/roles/pihole_dns/tasks/main.yml
2026-01-19 01:41:45 -08:00

56 lines
1.7 KiB
YAML

---
- name: Ensure dnsmasq.d exists
ansible.builtin.file:
path: /etc/dnsmasq.d
state: directory
mode: "0755"
- name: Configure dns-forward-max
ansible.builtin.template:
src: 99-dns-forward-max.conf.j2
dest: /etc/dnsmasq.d/99-dns-forward-max.conf
owner: root
group: root
mode: "0644"
notify: restart pihole-FTL
- name: Configure Pi-hole forwarding for Samba AD + reverse zone
ansible.builtin.template:
src: 05-samba-ad.conf.j2
dest: /etc/dnsmasq.d/05-samba-ad.conf
owner: root
group: root
mode: "0644"
notify: restart pihole-FTL
- name: Read current Pi-hole FTL DB journal mode (WAL?)
ansible.builtin.command: sqlite3 /etc/pihole/pihole-FTL.db "PRAGMA journal_mode;"
register: pihole_journal
changed_when: false
failed_when: false
- name: Parse current journal mode (safe default)
ansible.builtin.set_fact:
pihole_journal_mode: "{{ (pihole_journal.stdout | default('') | trim | lower) }}"
- name: Determine whether WAL update is needed
ansible.builtin.set_fact:
pihole_need_wal: "{{ (pihole_journal.rc | default(1) == 0) and (pihole_journal_mode != 'wal') }}"
# Only stop/start FTL if we are actually changing the journal mode.
- name: Enable WAL mode on Pi-hole FTL DB (one-time)
block:
- name: Stop pihole-FTL before switching SQLite journal mode
ansible.builtin.service:
name: pihole-FTL
state: stopped
- name: Set SQLite journal_mode=WAL
ansible.builtin.command: sqlite3 /etc/pihole/pihole-FTL.db "PRAGMA journal_mode=WAL;"
- name: Start pihole-FTL after switching SQLite journal mode
ansible.builtin.service:
name: pihole-FTL
state: started
when: pihole_need_wal