add: unattended upgrades

roles/base/tasks/main.yaml

@@ -10,6 +10,7 @@
         - htop
         - ncdu
         - gpg
+        - unattended-upgrades
 
 - name: Ensure Opt dir exists and accessible
   file:
@@ -72,3 +73,10 @@
   with_items:
     - daemon.conf
     - syslog.conf
+
+- name: Template Unattended Upgrade conf
+  template:
+    src: "{{ item }}"
+    dest: "/etc/apt/apt.conf.d/"
+  with_items:
+    - 20auto-upgrades.conf

roles/base/templates/20auto-upgrades.conf

@@ -0,0 +1,2 @@
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";