unwind: Initial version of role

roles/unwind/handlers/main.yml

@@ -0,0 +1,5 @@
+---
+- name: Restart unwind
+  ansible.builtin.service:
+    name: unwind
+    state: restarted

roles/unwind/tasks/main.yml

@@ -0,0 +1,15 @@
+---
+- name: Copy config
+  ansible.builtin.template:
+    dest: /etc/unwind.conf
+    src: unwind.conf.j2
+    mode: "0644"
+    owner: root
+    group: "{{ ansible_wheel }}"
+  notify: Restart unwind
+
+- name: Enable service
+  ansible.builtin.service:
+    name: unwind
+    state: started
+    enabled: true

roles/unwind/templates/unwind.conf.j2

@@ -0,0 +1,10 @@
+{% if network_dns_servers is defined %}
+forwarder {
+{%   for addr in network_dns_servers %}
+    {{ addr }} port 853 authentication name "{{ lookup('community.general.dig', addr + '/PTR')[:-1] }}" DoT
+{%   endfor %}
+}
+preference { DoT }
+{% else %}
+preference { oDoT-autoconf }
+{% endif %}