- name: install packages
  ansible.builtin.apt:
    pkg:
    - unbound
    - unbound-anchor

- name: copy unbound config
  ansible.builtin.template:
    src: unbound.conf.j2
    dest: /etc/unbound/unbound.conf
    mode: "0640"
  notify: restart unbound