---
- name: systemctl restart unbound.service
  systemd:
    name: unbound
    enabled: true
    state: restarted
  listen: update root trust anchor

- name: run unbound-anchor
  command: unbound-anchor
  listen: update root trust anchor