ansible-consul/tasks/dnsmasq.yml

---
- name: Install Dnsmasq package
  ansible.builtin.package:
    name: "{{ dnsmasq_package }}"
    state: present

- name: Create Dnsmasq configuration directory
  ansible.builtin.file:
    path: /etc/dnsmasq.d
    state: directory
    owner: root
    group: root
    mode: "0700"

- name: Create Dnsmasq configuration
  ansible.builtin.template:
    src: dnsmasq-10-consul.j2
    dest: /etc/dnsmasq.d/10-consul.conf
    owner: root
    group: root
    mode: "0644"
  notify: restart dnsmasq

- name: Disable systemd-resolved
  when: ansible_service_mgr == "systemd"
  block:
    - name: Disable systemd-resolved service
      ansible.builtin.service:
        name: systemd-resolved
        enabled: false
        state: stopped

    - name: Check if resolv.conf is pointing to systemd-resolved
      ansible.builtin.stat:
        path: /etc/resolv.conf
      register: resolv_dot_conf

    - name: Remove resolv.conf association with systemd-resolved
      ansible.builtin.file:
        src: /run/resolvconf/resolv.conf
        path: /etc/resolv.conf
        state: link
      when:
        - resolv_dot_conf.stat.islnk
        - 'resolv_dot_conf.stat.link_source == "/run/systemd/resolve/stub-resolv.conf"'

- name: Ensure DNSmasq is started
  ansible.builtin.service:
    name: dnsmasq
    state: started
    enabled: true