Move to static DNS servers and use DoT

This now affects only Fedora and OpenBSD hosts

group_vars/all.yml

@@ -31,5 +31,10 @@ boot_url: https://boot.foo.sh
 # ssh public keys for logsync user
 logsync_publickeys: "{{ lookup('file', '../files/ssh/logsync.pub') }}"
 
+# default name servers
+network_dns_servers:
+  - 8.8.8.8
+  - 8.8.4.4
+
 # hardcode this for now
 ansible_datacenter: home

group_vars/fsolgw.yml

@@ -7,7 +7,6 @@ network_vip_interfaces:
     ip6addr: 2a00:4cc1:6:1006::1
     ip6netmask: 64
     pass: "{{ vip145_pass }}"
-network_dns_servers: [172.20.20.10, 172.20.21.1, 172.20.21.2]
 
 # use custom firewall and ifstated config
 firewall_src: pf.conf.gw_fsol

group_vars/home.yml

@@ -0,0 +1,5 @@
+---
+network_dns_servers:
+  - 172.20.20.10
+  - 172.20.20.11
+  - 172.20.20.12

group_vars/proxy.yml

@@ -4,8 +4,6 @@ mem_size: 1024
 # use bigger disk for os as we have web site data there
 dsk_size: 30
 
-network_dns_servers:
-  - 172.20.20.10
 network_default_gateway: 37.16.96.145
 
 network_vip_interfaces:

group_vars/relay.yml

@@ -1,6 +1,4 @@
 ---
-network_dns_servers:
-  - 172.20.20.10
 network_default_gateway: 37.16.96.145
 
 network_vip_interfaces:

group_vars/vultr.yml

@@ -1,4 +0,0 @@
----
-network_dns_servers:
-  - 8.8.8.8
-  - 9.9.9.9