fix zone transfers

fix dns ports
fixate dns server

ansible/roles/dnsmasq/files/dnsmasq.conf

@@ -13,7 +13,7 @@ expand-hosts
 # Domain that is used for DHCP on this network
 domain=dmz
 # IPv4 DHCP range
-dhcp-range=192.168.30.100,192.168.30.200,infinite
+dhcp-range=192.168.30.100,192.168.30.200,15m
 # Predefined DHCP hosts
 dhcp-host=b8:27:eb:b9:ab:e2,esrom
 dhcp-host=b4:2e:99:77:1b:da,max,192.168.30.3
@@ -29,11 +29,13 @@ ra-param=*,0,0
 # Alias public IP address to local
 alias=84.245.14.149,192.168.30.3
 # Override DNS servers for our domains
-server=/pizzapim.nl/192.168.30.7#5353
-server=/geokunis2.nl/192.168.30.7#5353
-server=/pim.kunis.nl/192.168.30.7#5353
+server=/pizzapim.nl/192.168.30.7
+server=/geokunis2.nl/192.168.30.7
+server=/pim.kunis.nl/192.168.30.7
 # Enable extended logging
 log-dhcp
 log-queries
 # Resolve dns.dmz to addresses on main NIC
 interface-name=hermes.dmz,ens3
+# Non-conventional port because we also run nsd on this machine
+port=5353

ansible/roles/dnsmasq/tasks/main.yml

@@ -10,8 +10,9 @@
   copy:
     src: "{{ role_path }}/files/dnsmasq.conf"
     dest: "/etc/dnsmasq.conf"
+  register: config
 - name: Enable dnsmasq
   systemd:
     name: dnsmasq
     enabled: true
-    state: started
+    state: "{{ 'restarted' if config.changed else 'started' }}"