---
- name: 配置 VyOS DN42 DNS 转发
  hosts: site_routers
  gather_facts: false
  vars:
    dn42_dns_zones:
      - dn42
      - 20.172.in-addr.arpa
      - 21.172.in-addr.arpa
      - 22.172.in-addr.arpa
      - 23.172.in-addr.arpa
      - d.f.ip6.arpa
    dn42_dns_servers:
      - 172.20.0.53
      - 172.23.0.53
      - fd42:d42:d42:54::1
      - fd42:d42:d42:53::1
  tasks:
    - name: 配置受限监听、注册地址源与条件转发
      vyos.vyos.vyos_config:
        lines: "{{ lookup('template', 'templates/vyos-dn42-dns.conf.j2').splitlines() | reject('equalto', '') | list }}"
        save: true
        comment: Ansible DN42 DNS forwarding