The evenings this week have been a bit of an adventure with the home lab. I'm migrating a number of random services onto a pair of new VM's, one on each of my two Proxmox hosts. They'll become DNS servers (authoritative using nsd and recursive using Unbound), including basic DNS filtering of the bad stuff as well as DNS64/NAT64 services so I can move to more IPv6 mostly systems at home. They'll probably also pickup NTP and any other services that make sense along the way.
My challenge has been to perform as much of the setup as possible using Ansible. I'm still very much a beginner but I seem to be making good progress.
I've been fighting with NSD/Unbound and reverse DNS but after a couple of days that's on hold. Forward resolution is working so I've moved some of the home VLAN's over to add some load. Holy crap they are fast. There's a little delay for a new site not in the cache but it soon picks up. It feels like an order of magnitude faster than my venerable pi 3b+ running pihole with the same DNS filtered list.
I'll crack the reverse DNS stuff at some point and now I've realised the reason I couldn't restart NSD after a change (so I was rebooting the VM) was because I didn't realise the "remote control" options are also needed for local control on the VM, it's a lot faster to get updates on place.
More work tomorrow night on the Ansible playbook with some better tags to manage operations without updating everything.
