From 70a4e485dd141bcaaede4a0f450839746c69747f Mon Sep 17 00:00:00 2001
From: Sheppy <sheppy@atlantishq.de>
Date: Mon, 23 Dec 2024 10:40:10 +0000
Subject: [PATCH] add: unattended upgrades

---
 roles/base/tasks/main.yaml                | 8 ++++++++
 roles/base/templates/20auto-upgrades.conf | 2 ++
 2 files changed, 10 insertions(+)
 create mode 100644 roles/base/templates/20auto-upgrades.conf

diff --git a/roles/base/tasks/main.yaml b/roles/base/tasks/main.yaml
index f7161ff..cc64edc 100644
--- a/roles/base/tasks/main.yaml
+++ b/roles/base/tasks/main.yaml
@@ -10,6 +10,7 @@
         - htop
         - ncdu
         - gpg
+        - unattended-upgrades
 
 - name: Ensure Opt dir exists and accessible
   file:
@@ -72,3 +73,10 @@
   with_items:
     - daemon.conf
     - syslog.conf
+
+- name: Template Unattended Upgrade conf
+  template:
+    src: "{{ item }}"
+    dest: "/etc/apt/apt.conf.d/"
+  with_items:
+    - 20auto-upgrades.conf
diff --git a/roles/base/templates/20auto-upgrades.conf b/roles/base/templates/20auto-upgrades.conf
new file mode 100644
index 0000000..8d6d7c8
--- /dev/null
+++ b/roles/base/templates/20auto-upgrades.conf
@@ -0,0 +1,2 @@
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";