feat(arch): add configuration for dns

roles/arch-post-setup/files/default-resolve.conf

@@ -0,0 +1,6 @@
+[Resolve]
+DNS=1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google
+Cache=yes
+DNSSEC=yes
+DNSOverTLS=yes
+MulticastDNS=yes

roles/arch-post-setup/handlers/main.yml

@@ -1,2 +1,7 @@
 ---
 # handlers file for arch-post-setup
+- name: Restart Systemd Resolved
+  ansible.builtin.systemd:
+    name: systemd-resolved.service
+    state: restarted
+  listen: restart systemd resolved

roles/arch-post-setup/tasks/dns.yml

@@ -0,0 +1,25 @@
+- name: Enable and Start Systemd Resolved
+  become: true
+  ansible.builtin.systemd:
+    name: systemd-resolved.service
+    state: started
+    enabled: true
+
+- name: Ensure systemd/resolved.conf.d directory exists
+  become: true
+  ansible.builtin.file:
+    path: /etc/systemd/resolved.conf.d/
+    state: directory
+    mode: "0755"
+    owner: root
+    group: root
+
+- name: Install Default Resolved Config
+  become: true
+  ansible.builtin.copy:
+    src: default-resolve.conf
+    dest: /etc/systemd/resolved.conf.d/default.conf
+    mode: "0644"
+    owner: root
+    group: root
+  notify: restart systemd resolved

roles/arch-post-setup/tasks/main.yml

@@ -177,3 +177,4 @@
     - reflector.yml
     - bluetooth.yml
     - disable-gpu.yml
+    - dns.yml