firewall: set up resolv.conf

To use IPv6 nameserver addresses.

roles/firewall/tasks/main.yml

@@ -51,6 +51,12 @@
     mode: 0644
   notify: enable interfaces
 
+- name: Set up resolv.conf
+  template:
+    dest: /etc/resolv.conf
+    src: resolv.conf.j2
+    mode: 0644
+
 - name: Set up sysctls
   template:
     dest: /etc/sysctl.d/firewall.conf

templates/resolv.conf.j2

@@ -0,0 +1,4 @@
+search {{ domain }}
+{% for server in dns6 %}
+nameserver {{ server }}
+{% endfor %}