style

roles/base/handlers/main.yml

@@ -0,0 +1,13 @@
+---
+- name: Reboot system
+  block:
+    - name: Check if reboot is required
+      ansible.builtin.stat:
+        path: /var/run/reboot-required
+      register: reboot_required_file
+
+    - name: Reboot host if necessary
+      become: true
+      ansible.builtin.reboot:
+        post_reboot_delay: 10
+      when: reboot_required_file.stat.exists

roles/base/tasks/main.yml

@@ -1,18 +1,20 @@
 ---
 - name: Set system timezone
+  become: true
   community.general.timezone:
     # name: "{{ base_timezone }}"
     name: Europe/Zurich
-  become: true
 
 - name: Fully upgrade system
+  become: true
   ansible.builtin.apt:
     update_cache: true
     upgrade: dist
     cache_valid_time: 3600
-  become: true
+  notify: Reboot system
 
 - name: Install essential system utilities
+  become: true
   ansible.builtin.apt:
     # name: "{{ base_packages }}"
     name:
@@ -25,7 +27,6 @@
       - unattended-upgrades
     state: present
     update_cache: true
-  become: true
 
 # - name: Enable unattended-upgrades
 #   ansible.builtin.copy:
@@ -35,14 +36,3 @@
 #       APT::Periodic::Unattended-Upgrade "1";
 #     mode: "0644"
 #   when: ansible_facts['os_family'] == "Debian"
-
-- name: Check if reboot is required
-  ansible.builtin.stat:
-    path: /var/run/reboot-required
-  register: reboot_required_file
-
-- name: Reboot host if necessary
-  ansible.builtin.reboot:
-    post_reboot_delay: 10
-  become: true
-  when: reboot_required_file.stat.exists