Merge branch 'byebye-unbound' into 'master'

Ensure unbound is used where we want it and removed all other places

Closes #234

See merge request !325

host_vars/mail.archlinux.org/misc

@@ -9,3 +9,4 @@ fail2ban_jails:
 
 ipv4_address: "95.216.189.61"
 ipv6_address: "2a01:4f9:c010:3052::1"
+dns_servers: ["127.0.0.1"]

playbooks/all-hosts-basic.yml

@@ -7,7 +7,6 @@
     - { role: common }
     - { role: tools }
     - { role: firewalld }
-    - { role: unbound }
     # reconfiguring sshd may break the AUR on luna (unchecked)
     # - { role: sshd, tags: ['sshd'] }
     - { role: root_ssh }

playbooks/archive-mirrors.yml

@@ -11,7 +11,6 @@
     - { role: root_ssh }
     - { role: certbot }
     - { role: nginx }
-    - { role: unbound }
     - { role: syncarchive }
     - { role: archive_web }
     - { role: prometheus_exporters }

playbooks/matrix.archlinux.org.yml

@@ -8,7 +8,6 @@
     - { role: tools }
     - { role: firewalld }
     - { role: sshd }
-    - { role: unbound }
     - { role: root_ssh }
     - { role: borg_client, tags: ["borg"] }
     - { role: certbot }

playbooks/md.archlinux.org.yml

@@ -8,7 +8,6 @@
     - { role: tools }
     - { role: firewalld }
     - { role: sshd }
-    - { role: unbound }
     - { role: root_ssh }
     - { role: borg_client, tags: ["borg"] }
     - { role: nginx }

playbooks/mirrors.yml

@@ -9,7 +9,6 @@
     - { role: root_ssh }
     - { role: certbot }
     - { role: nginx }
-    - { role: unbound }
     - { role: syncrepo, tags: ['nginx'] }
     - { role: archweb, archweb_site: false, archweb_services: false, archweb_mirrorcheck: true }
     - { role: arch32_mirror, tags: ['nginx'] }

playbooks/phrik.yml

@@ -10,6 +10,5 @@
     - { role: bugbot }
     - { role: phrik }
     - { role: sshd }
-    - { role: unbound }
     - { role: root_ssh }
     - { role: prometheus_exporters }

playbooks/quassel.archlinux.org.yml

@@ -8,7 +8,6 @@
     - { role: tools }
     - { role: firewalld }
     - { role: sshd }
-    - { role: unbound }
     - { role: root_ssh }
     - { role: borg_client, tags: ["borg"] }
     - { role: certbot }

playbooks/rebuilderd-workers.yml

@@ -8,7 +8,6 @@
     - { role: tools }
     - { role: firewalld }
     - { role: sshd }
-    - { role: unbound }
     - { role: root_ssh }
     - { role: rebuilderd_worker }
     - { role: prometheus_exporters }

playbooks/redirect.archlinux.org.yml

@@ -5,7 +5,6 @@
     - { role: common }
     - { role: tools }
     - { role: firewalld }
-    - { role: unbound }
     - { role: sshd }
     - { role: root_ssh }
     - { role: certbot }

playbooks/reproducible.archlinux.org.yml

@@ -8,7 +8,6 @@
     - { role: tools }
     - { role: firewalld }
     - { role: sshd }
-    - { role: unbound }
     - { role: root_ssh }
     - { role: borg_client, tags: ["borg"] }
     - { role: certbot }

playbooks/state.archlinux.org.yml

@@ -8,7 +8,6 @@
     - { role: tools }
     - { role: firewalld }
     - { role: sshd }
-    - { role: unbound }
     - { role: certbot }
     - { role: borg_client, tags: ["borg"] }
     - { role: root_ssh }