---
# NOTE: OPNsense does not expose general system settings (hostname, domain,
# timezone, DNS) via the API. These must be configured manually via the WebUI
# under System → Settings → General.

- name: Disable dnsmasq (using Unbound for DNS and Kea for DHCP)
  oxlorg.opnsense.dnsmasq_general:
    firewall: "{{ opnsense_firewall }}"
    api_key: "{{ opnsense_api_key }}"
    api_secret: "{{ opnsense_api_secret }}"
    ssl_verify: "{{ opnsense_ssl_verify }}"
    api_port: "{{ opnsense_api_port }}"
    enabled: false