51 lines
1.2 KiB
YAML
51 lines
1.2 KiB
YAML
---
|
|
- name: Set system timezone
|
|
community.general.timezone:
|
|
# name: "{{ base_timezone }}"
|
|
name: Europe/Zurich
|
|
become: true
|
|
|
|
- name: Fully upgrade system
|
|
ansible.builtin.apt:
|
|
update_cache: true
|
|
upgrade: dist
|
|
cache_valid_time: 3600
|
|
become: true
|
|
|
|
- name: Install essential system utilities
|
|
ansible.builtin.apt:
|
|
# name: "{{ base_packages }}"
|
|
name:
|
|
- acl
|
|
- curl
|
|
- git
|
|
- htop
|
|
- rsync
|
|
- unzip
|
|
- unattended-upgrades
|
|
state: present
|
|
update_cache: true
|
|
become: true
|
|
|
|
# - name: Enable unattended-upgrades
|
|
# ansible.builtin.copy:
|
|
# dest: /etc/apt/apt.conf.d/20auto-upgrades
|
|
# content: |
|
|
# APT::Periodic::Update-Package-Lists "1";
|
|
# APT::Periodic::Unattended-Upgrade "1";
|
|
# mode: "0644"
|
|
# when: ansible_facts['os_family'] == "Debian"
|
|
|
|
- name: Reboot system if required
|
|
block:
|
|
- name: Check if reboot is required
|
|
ansible.builtin.stat:
|
|
path: /var/run/reboot-required
|
|
register: reboot_required_file
|
|
|
|
- name: Reboot host if necessary
|
|
become: true
|
|
ansible.builtin.reboot:
|
|
post_reboot_delay: 10
|
|
when: reboot_required_file.stat.exists
|