Infra/ansible/roles/pihole/tasks/configure.yml

- name: Set pihole webpassword
  become: "{{ do_become }}"
  ansible.builtin.lineinfile:
    path: /etc/pihole/setupVars.conf
    regexp: "^WEBPASSWORD="
    line: WEBPASSWORD={{ pihole.password | hash("sha256") | hash("sha256") | default("")}}
    create: yes

- name: Set pihole theme
  become: "{{ do_become }}"
  ansible.builtin.lineinfile:
    path: /etc/pihole/setupVars.conf
    regexp: "^WEBTHEME="
    line: WEBTHEME=default-dark #default-dark default-darker default-light
    create: yes

- name: Set pihole layout
  become: "{{ do_become }}"
  ansible.builtin.lineinfile:
    path: /etc/pihole/setupVars.conf
    regexp: "^WEBUIBOXEDLAYOUT="
    line: WEBUIBOXEDLAYOUT=boxed
    create: yes

- name: Set pihole listen
  become: "{{ do_become }}"
  ansible.builtin.lineinfile:
    path: /etc/pihole/setupVars.conf
    regexp: "^DNSMASQ_LISTENING="
    line: DNSMASQ_LISTENING=single
    create: yes

- name: Set pihole fqdn forwarding
  become: "{{ do_become }}"
  ansible.builtin.lineinfile:
    path: /etc/pihole/setupVars.conf
    regexp: "^DNS_FQDN_REQUIRED="
    line: DNS_FQDN_REQUIRED=true
    create: yes

- name: Set pihole reverse lookup
  become: "{{ do_become }}"
  ansible.builtin.lineinfile:
    path: /etc/pihole/setupVars.conf
    regexp: "^DNS_BOGUS_PRIV="
    line: DNS_BOGUS_PRIV=true
    create: yes

- name: Set pihole iCloud relay
  become: "{{ do_become }}"
  ansible.builtin.lineinfile:
    path: /etc/pihole/setupVars.conf
    regexp: "^BLOCK_ICLOUD_PR="
    line: BLOCK_ICLOUD_PR=false
    create: yes