From 3cd6aa722e093a464a407f5ac914a6f3616b2cb9 Mon Sep 17 00:00:00 2001
From: Matthew Fennell <matthew@fennell.dev>
Date: Thu, 5 Sep 2024 23:25:11 +0100
Subject: Install custom unattended-upgrades config

The main way the config varies from Debian's default, is that we make sure to
reboot after each upgrade.
---
 playbook.yaml | 9 +++++++++
 1 file changed, 9 insertions(+)

(limited to 'playbook.yaml')

diff --git a/playbook.yaml b/playbook.yaml
index dd3281b..cad691d 100644
--- a/playbook.yaml
+++ b/playbook.yaml
@@ -483,6 +483,15 @@
      become: true
      notify: Restart sshd
 
+   - name: Ensure unattended upgrades config is installed
+     ansible.builtin.copy:
+      src: "{{ playbook_dir }}/files/50unattended-upgrades"
+      dest: "/etc/apt/apt.conf.d/50unattended-upgrades"
+      owner: root
+      group: root
+      mode: "0644"
+     become: true
+
   handlers:
 
    - name: Restart prosody
-- 
cgit v1.2.3