move openresolv to its own role

playbook.yml

@@ -25,6 +25,7 @@
     - { role: ntp, tags: ['ntp'] }
     - { role: firejail, tags: ['firejail'] }
     - { role: tor, tags: ['tor'], when: "tor is defined" }
+    - { role: openresolv, tags: ['openresolv'] }
     - { role: unbound, tags: ['unbound'] }
     - { role: editors, tags: ['editors'] }
     - { role: filesystems, tags: ['filesystems'] }

roles/nettools/tasks/main.yml

@@ -60,8 +60,3 @@
       - wireguard-tools
       - wireguard-dkms
     state: present
-
-- name: Install openresolv
-  pacman:
-    name: openresolv
-    state: present

roles/openresolv/tasks/main.yml

@@ -0,0 +1,10 @@
+---
+- name: Install openresolv
+  pacman:
+    name: openresolv
+    state: present
+
+- name: Push resolvconf.conf
+  template:
+    src: resolvconf.conf.j2
+    dest: /etc/resolvconf.conf

roles/openresolv/templates/resolvconf.conf.j2

@@ -0,0 +1,5 @@
+# Configuration for resolvconf(8)
+# See resolvconf.conf(5) for details
+
+resolv_conf=/etc/resolv.conf
+{% if unbound %}name_servers=127.0.0.1{% endif %}

roles/unbound/tasks/main.yml

@@ -23,12 +23,6 @@
     enabled: yes
     state: started
 
-- name: Configure resolvconf to use Unbound
-  lineinfile:
-    dest: /etc/resolvconf.conf
-    state: present
-    line: "name_servers=127.0.0.1"
-
 - name: Push Unbound root hits update service file
   copy:
     src: roothints.service