Remove all that checking.
ns02 and ns04 are a thing
Of course this is not standardized
Use this DNS for now
Add redirects for proxies.
Break proxy redirects out into a sub-playbook.
First try at the redirectmatch role, ported from puppet.
Move install the totpcgi key and cert to the totpcgi role
302 by default.
Lets not do VPN on PHX2 DNS