Only disable stub resolver for control machines

roles/common/tasks/base.yml

@@ -16,7 +16,10 @@
     owner: root
     mode: u=rw,g=r,o=r
 
-- name: Set /etc/resolv.conf symlink
+- name: Disable systemd-resolved stub resolver
+  when: hostname in groups['control_infra']
+  block:
+    - name: Set /etc/resolv.conf symlink
       ansible.builtin.file:
         path: /etc/resolv.conf
         src: /run/systemd/resolve/resolv.conf
@@ -24,7 +27,7 @@
         force: true
         state: link
 
-- name: Disable systemd-resolved stub resolver
+    - name: Comment out DNSStubListener
       ansible.builtin.lineinfile:
         path: /etc/systemd/resolved.conf
         regexp: '^#?DNSStubListener='