---
- name: Playbook pour installer/configurer/sécuriser SSH et installer/configurer BIND
  hosts: all
  become: yes
  tasks:

    - name: Installer le service BIND
      apt:
        name: bind9
        state: present
        update_cache: yes

    - name: Configurer BIND avec un DNS redirecteur et désactiver DNSSEC
      template:
        src: Templates_named.conf.options.j2
        dest: /etc/bind/named.conf.options
        owner: root
        group: bind
        mode: '0644'
      notify:
        - Restart BIND

  handlers:
    - name: Restart BIND
      service:
        name: bind9
        state: restarted