Entering DoH\DoT

playbooks/resolvconf.yml

@@ -28,7 +28,7 @@
         Domains=guaranteedstruggle.host just-for-me.internal
 
         # Включаем DoT в строгом (strict) режиме для защиты от утечек
-        DNSOverTLS=strict
+        DNSOverTLS=yes
         DNSStubListener=yes
 
         
@@ -48,9 +48,9 @@
       state: restarted
     #when: systemd_resolved_conf.changed
 
-  - name: Force link /etc/resolv.conf to systemd-resolved stub
-    ansible.builtin.file:
-      src: /run/systemd/resolve/stub-resolv.conf
-      dest: /etc/resolv.conf
-      state: link
-      force: yes  # перебьет файл, созданный Proxmox
+  # - name: Force link /etc/resolv.conf to systemd-resolved stub
+  #   ansible.builtin.file:
+  #     src: /run/systemd/resolve/stub-resolv.conf
+  #     dest: /etc/resolv.conf
+  #     state: link
+  #     force: yes  # перебьет файл, созданный Proxmox