---
- name: DNS resolver auf DoH setzen (via automation1)
  copy:
    content: |
      nameserver 10.5.85.5
    dest: /etc/resolv.conf
    mode: '0644'
  when: inventory_hostname != 'automation1'

- name: dnscrypt-proxy stoppen auf VMs (nicht noetig)
  systemd:
    name: dnscrypt-proxy
    state: stopped
    enabled: false
  when: inventory_hostname != 'automation1'
  ignore_errors: true