---
# tasks file for security

- name: Configurer dnsmasq
  ansible.builtin.template:
    src: dnsmasq.conf.j2
    dest: /etc/dnsmasq.d/cache.conf
    owner: root
    group: root
    mode: u=rw,g=r,o=r
  become: true
  notify: Recharger dnsmasq.service

- name: Déployer la configuration de l'instance
  ansible.builtin.template:
    owner: dnsmasq
    group: root
    mode: u=rw,g=r,o=r
    src: host.conf.j2
    dest: /srv/dnsmasq/{{ inventory_hostname }}.conf
  become: true
  notify: Recharger dnsmasq.service

- name: Déployer le fichier d'hôte en partant de l'inventaire
#  ansible.builtin.template:
  ansible.builtin.blockinfile:
    path: /srv/dnsmasq/ansible_inventory.conf.disabled
    marker: "# {mark} ANSIBLE MANAGED BLOCK for {{ inventory_hostname }} "
    owner: dnsmasq
    group: root
    mode: u=rw,g=r,o=r
#    src: hosts.conf.j2
#    dest: /srv/dnsmasq/ansible_inventory.conf.disabled
  become: true
  notify: Recharger dnsmasq.service
  loop: "{{ groups['all'] }}"