Handle DNS64 locally to fix DNSSEC issues Unbound passes a "DO" (DNSSEC Okay) flag to upstream servers, which means they don't synthesise DNS64 entries correctly for some domains. Doing this loses us redundancy (if :82: goes down we're DNS-less until a manual change) but at least we can resolve more DNS now

concat { '/tmp/file':
  format => 'yaml', # See REFERENCE.md for more formats
}

concat::fragment { '1':
  target  => '/tmp/file',
  content => '{"one": "foo"}',
}

concat::fragment { '2':
  target  => '/tmp/file',
  content => '{"two": "bar"}',
}