- name: configure secondary nameserver
  hosts: secondary_dns
  remote_user: devops
  become: yes
  
  tasks:
    - name: install BIND9
      yum:
        name: bind
        state: present

    - name: copy secondary config file
      copy:
        src: files/secondary-named.conf
        dest: /etc/named.conf
        owner: root
        group: named
        mode: 0640
      notify:
        - reload_named

    - name: copy backend config file
      copy:
        src: files/secondary-named.backend.conf
        dest: /etc/named.backend.conf
        owner: root
        group: named
        mode: 0640
      notify: 
        - reload_named

    - name: allow dns in firewall
      firewalld:
        service: dns
        state: enabled
        permanent: yes
        immediate: yes

    - name: ensure named running and enabled
      service:
        name: named
        state: started
        enabled: yes

  handlers:
    - name: reload_named
      service:
        name: named
        state: reloaded