stuff

roles/configs/files/50unattended-upgrades

@@ -0,0 +1,35 @@
+Unattended-Upgrade::Allowed-Origins {
+	"${distro_id}:${distro_codename}";
+	"${distro_id}:${distro_codename}-security";
+	"${distro_id}ESMApps:${distro_codename}-apps-security";
+	"${distro_id}ESM:${distro_codename}-infra-security";
+	"${distro_id}:${distro_codename}-updates";
+//	"${distro_id}:${distro_codename}-proposed";
+//	"${distro_id}:${distro_codename}-backports";
+};
+
+Unattended-Upgrade::Package-Blacklist {
+    // The following matches all packages starting with linux-
+
+    // Use $ to explicitely define the end of a package name. Without
+    // the $, "libc6" would match all of them.
+
+    // Special characters need escaping
+
+    // The following matches packages like xen-system-amd64, xen-utils-4.1,
+    // xenstore-utils and libxenstore3.0
+
+    // For more information about Python regular expressions, see
+    // https://docs.python.org/3/howto/regex.html
+};
+
+Unattended-Upgrade::DevRelease "auto";
+
+Unattended-Upgrade::AutoFixInterruptedDpkg "true";
+
+Unattended-Upgrade::Remove-Unused-Kernel-Packages "true";
+
+Unattended-Upgrade::Remove-New-Unused-Dependencies "true";
+
+Unattended-Upgrade::Remove-Unused-Dependencies "true";
+

roles/configs/tasks/main.yml

@@ -3,18 +3,8 @@
   import_tasks: root.yml
   become: true
 
-- name: Check for OMB
-  stat:
-    path: "{{ ansible_user_dir }}/.oh-my-bash"
-  register: omb_flag
-
-- debug:
-    msg: 'OMB is not installed, run: bash -c "$(curl -fsSL https://raw.githubusercontent.com/ohmybash/oh-my-bash/master/tools/install.sh)"'
-  when: not omb_flag.stat.exists 
-
-- name: Put simple bashrc config
+- name: bashrc
   template:
     src: files/bashrc
     dest: "{{ ansible_user_dir }}/.bashrc"
-  when: not omb_flag.stat.exists
 

roles/configs/tasks/root.yml

@@ -76,4 +76,7 @@
   community.general.timezone:
     name: Europe/Moscow
 
-
+- name: Put unattended-upgrades config
+  template:
+    src: files/50unattended-upgrades
+    dest: /etc/apt/apt.conf.d/50unattended-upgrades