1 files changed, 63 insertions, 0 deletions

diff --git a/roles/services/unattended_upgrades/tasks/main.yml b/roles/services/unattended_upgrades/tasks/main.yml
new file mode 100644
index 0000000..bad3c02
--- /dev/null
+++ b/roles/services/unattended_upgrades/tasks/main.yml
@@ -0,0 +1,63 @@
+- name: install packages
+  package:
+    name: "{{ unattended_upgrades_packages }}"
+    state: latest
+
+- name: edit apt update timer
+  lineinfile:
+    path: /etc/systemd/system/timers.target.wants/apt-daily.timer
+    regexp: "OnCalendar.*"
+    line: "OnCalendar=*-*-* 0,4,8,12,16,20:00"
+
+- name: edit apt update timer
+  lineinfile:
+    path: /etc/systemd/system/timers.target.wants/apt-daily.timer
+    regexp: "RandomizedDelaySec.*"
+    line: "RandomizedDelaySec=10m"
+
+- name: edit apt upgrade timer
+  lineinfile:
+    path: /etc/systemd/system/timers.target.wants/apt-daily-upgrade.timer
+    regexp: "OnCalendar.*"
+    line: "OnCalendar=*-*-* 0,4,8,12,16,20:30"
+
+- name: edit apt upgrade timer
+  lineinfile:
+    path: /etc/systemd/system/timers.target.wants/apt-daily-upgrade.timer
+    regexp: "RandomizedDelaySec.*"
+    line: "RandomizedDelaySec=5m"
+
+- name: edit APT::Periodic settings
+  lineinfile:
+    path: /etc/apt/apt.conf.d/20auto-upgrades
+    regexp: "APT::Periodic::Update.*"
+    line: 'APT::Periodic::Update-Package-Lists "always";'
+
+- name: edit APT::Periodic settings
+  lineinfile:
+    path: /etc/apt/apt.conf.d/20auto-upgrades
+    regexp: "APT::Periodic::Unattended.*"
+    line: 'APT::Periodic::Unattended-Upgrade "always";'
+
+- name: configure unattended upgrades
+  lineinfile:
+    path: /etc/apt/apt.conf.d/50unattended-upgrades
+    regexp: ".*Unattended-Upgrade::Mail.*"
+    line: 'Unattended-Upgrade::Mail "{{ uu_mail_to }}";'
+
+- name: configure unattended upgrades
+  lineinfile:
+    path: /etc/apt/apt.conf.d/50unattended-upgrades
+    insertafter: 'Unattended-Upgrade::Mail "{{ uu_mail_to }}";'
+    line: 'Unattended-Upgrade::Sender "{{ uu_mail_from }}";'
+
+- name: configure unattended upgrades
+  lineinfile:
+    path: /etc/apt/apt.conf.d/50unattended-upgrades
+    regexp: ".*Unattended-Upgrade::MailReport.*"
+    line: 'Unattended-Upgrade::MailReport "always";'
+
+- name: restart service
+  service:
+    name: unattended-upgrades
+    state: restarted