---
- name: systemctl restart unbound.service
systemd:
name: unbound
enabled: true
state: restarted
listen: update root trust anchor
- name: run unbound-anchor
command: unbound-anchor