---
# tasks file for security

- name: Déployer le fichier lié à l'hôte
  ansible.builtin.template:
    owner: dnsmasq
    group: root
    mode: u=rw,g=r,o=r
    src: "{{ role_path }}/templates/host.conf.j2"
    dest: /srv/dnsmasq/{{ dnsmasq_client_filename }}.conf
  when:
    - dnsmasq_hosts | length > 0
    - dnsmasq_host_ipv4 not in dnsmasq_hosts
  loop: "{{ dnsmasq_hosts }}"
  loop_control:
    loop_var: dnsserver
  delegate_to: "{{ dnsserver }}"
  become: true
  notify: Recharger dnsmasq.service sur les serveurs

- name: Supprimer le fichier lié à l'hôte
  ansible.builtin.file:
    path: /srv/dnsmasq/{{ dnsmasq_client_filename }}.conf
    state: absent
  when:
    - dnsmasq_hosts | length > 0
    - dnsmasq_host_ipv4 not in dnsmasq_hosts
  tags: [destruction, never]
  loop: "{{ dnsmasq_hosts }}"
  loop_control:
    loop_var: dnsserver
  delegate_to: "{{ dnsserver }}"
  become: true
  notify: Recharger dnsmasq.service sur les serveurs