now with DoT support!

tasks/main.yml

@@ -26,6 +26,7 @@
       - 'dns64.{{domain_name}}'
       - 'dot.{{domain_name}}'
       - 'dot64.{{domain_name}}'
+    generate_dh: False
     pki_reload_script: |
       for x in {1..{{kresd_instances}}}
         do service kresd@$x restart

templates/kresd_conf.j2

@@ -6,7 +6,7 @@ net.outgoing_v6('{{kresd_outgoing_ipv6}}')
 user( '{{kresd_user}}','{{kresd_user}}')
 -- trust_anchors.file = 'root.keys'
 
--- net.tls("/etc/ssl/kresd/{{ansible_hostname}}.crt", "/etc/ssl/kresd/{{ansible_hostname}}.key")
+net.tls("/etc/ssl/kresd/{{ansible_hostname}}.crt", "/etc/ssl/kresd/{{ansible_hostname}}.key")
 
 reorder_RR(true)
 -- Unprivileged