From 55561ca3edd287410690adf5d0b72a1a01f6144d Mon Sep 17 00:00:00 2001
From: staticsafe <me@staticsafe.ca>
Date: Tue, 6 May 2014 17:57:02 +0000
Subject: [PATCH] Add unbound to pkg list. - Ensure haveged and unbound are
 started on boot - Use local unbound for DNS needs.

---
 debian.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/debian.yml b/debian.yml
index 3465651..2803bed 100644
--- a/debian.yml
+++ b/debian.yml
@@ -17,9 +17,14 @@
     - restart rsyslog
     - restart cron
   - name: Install required packages
-    apt: pkg=most,zsh,vim,vim-scripts,git,subversion,tmux,multitail,mtr-tiny,curl,dnsutils,sudo,gnupg,traceroute,htop,haveged,python-pip state=present
+    apt: pkg=most,zsh,vim,vim-scripts,git,subversion,tmux,multitail,mtr-tiny,curl,dnsutils,sudo,gnupg,traceroute,htop,haveged,python-pip,unbound state=present
   - name: Remove exim4
     apt: pkg=exim4-daemon-light state=absent
+  - name: Ensure haveged and unbound are started on boot
+    service: name=haveged enabled=yes
+    service: name=unbound enabled=yes
+  - name: use local unbound instance for DNS
+    shell: echo "nameserver ::1" > /etc/resolv.conf
   handlers:
     - name: restart rsyslog
       service: name=rsyslog state=restarted