diff --git a/handlers/main.yml b/handlers/main.yml
new file mode 100644
index 0000000..6c48822
--- /dev/null
+++ b/handlers/main.yml
@@ -0,0 +1,5 @@
+---
+
+- name: systemctl daemon-reload
+  ansible.builtin.systemd:
+    daemon_reload: true
diff --git a/tasks/main.yml b/tasks/main.yml
index 8ce851b..d4a534d 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -31,10 +31,19 @@
     minute: "*/5"
     job: "cd /opt/two && git pull > /var/log/git-pull.log 2>&1"
 
+- name: disable and stop dnsmasq
+  ansible.builtin.systemd:
+    name: "dnsmasq.service"
+    enabled: False
+    state: "stopped"
+    masked: true
+  notify: systemctl daemon-reload
+
 - name: deploy dnsmasq
   ansible.builtin.template:
     src: etc/systemd/system/dnsmasq.j2
     dest: "/etc/systemd/system/dnsmasq@.service"
+  notify: systemctl daemon-reload
 
 - name: deploy dnsmasq in netns
   ansible.builtin.template:
diff --git a/vars/main.yml b/vars/main.yml
index 7449f8a..da56eb6 100644
--- a/vars/main.yml
+++ b/vars/main.yml
@@ -13,6 +13,7 @@ __packages:
   whois: {}
   tcpdump: {}
   bridge-utils: {}
+  dnsmasq: {}
 
 __git:
   __user: "{{ deploy.git_user }}"