fix the dns role

* no localhost -> introduce internal_ip and use it for rndc
  communication
* create the rndc config file (since we use a non-standard address)
* create the rndc key in a non-default location (prevents annoying
  warnings)