hermes/ansible/roles/dnsmasq/tasks/main.yml

- name: Install dnsmasq
  apt:
    name: dnsmasq
- name: Disable systemd-resolved
  systemd:
    name: systemd-resolved
    enabled: false
    state: stopped
- name: Copy dnsmasq configuration
  copy:
    src: "{{ role_path }}/files/dnsmasq.conf"
    dest: "/etc/dnsmasq.conf"
  register: config
- name: Enable dnsmasq
  systemd:
    name: dnsmasq
    enabled: true
    state: "{{ 'restarted' if config.changed else 'started' }}"