defer reboot task

roles/base/handlers/main.yml

@@ -0,0 +1,13 @@
+---
+- name: Reboot system
+  block:
+    - name: Check if reboot is required
+      ansible.builtin.stat:
+        path: /var/run/reboot-required
+      register: reboot_required_file
+
+    - name: Reboot host if necessary
+      become: true
+      ansible.builtin.reboot:
+        post_reboot_delay: 10
+      when: reboot_required_file.stat.exists

roles/base/tasks/main.yml

@@ -11,6 +11,7 @@
     upgrade: dist
     cache_valid_time: 3600
   become: true
+  notify: Reboot system
 
 - name: Install essential system utilities
   ansible.builtin.apt:
@@ -35,16 +36,3 @@
 #       APT::Periodic::Unattended-Upgrade "1";
 #     mode: "0644"
 #   when: ansible_facts['os_family'] == "Debian"
-
-- name: Reboot system if required
-  block:
-    - name: Check if reboot is required
-      ansible.builtin.stat:
-        path: /var/run/reboot-required
-      register: reboot_required_file
-
-    - name: Reboot host if necessary
-      become: true
-      ansible.builtin.reboot:
-        post_reboot_delay: 10
-      when: reboot_required_file.stat.exists