---
# tasks file for security

- name: Configurer dnsmasq
  ansible.builtin.template:
    src: dnsmasq.conf.j2
    dest: /etc/dnsmasq.d/cache.conf
    owner: root
    group: root
    mode: u=rw,g=r,o=r
  become: true
  notify: Recharger dnsmasq.service

- name: Déployer la configuration des hôtes ansible
  ansible.builtin.template:
    src: ansible_hosts.conf.j2
    dest: /srv/dnsmasq/ansible_hosts.disabled
    owner: dnsmasq
    group: root
    mode: u=rw,g=r,o=r
  become: true
  notify: Recharger dnsmasq.service

#- name: Déployer la configuration de l'instance
#  ansible.builtin.template:
#    src: host.conf.j2
#    dest: /srv/dnsmasq/{{ inventory_hostname }}.conf
#    owner: dnsmasq
#    group: root
#    mode: u=rw,g=r,o=r
#  become: true
#  notify: Recharger dnsmasq.service

- name: Déployer les configurations specifiques
  ansible.builtin.template:
    src: specific.conf.j2
    dest: "{{ filename }}"
    owner: dnsmasq
    group: root
    mode: u=rw,g=r,o=r
  when: dnsmasq_specifics | length > 0
  become: true
  notify: Recharger dnsmasq.service
  loop: "{{ dnsmasq_specifics }}"
  loop_control:
    label: "{{ filename }}"
  vars:
    filename: /srv/dnsmasq/{{ item.hostname }}.conf