Configure unattended-upgrades

machine.yml

@@ -6,6 +6,26 @@
 
   tasks:
 
+    # -------------------------------------------------------------------------
+    # Unattended upgrades configuration.
+    # -------------------------------------------------------------------------
+
+    - name: Install unattended-upgrades
+      apt:
+        name: unattended-upgrades
+
+    - name: Configure unattended-upgrades
+      copy:
+        src: ./root/etc/apt/apt.conf.d/50unattended-upgrades
+        dest: /etc/apt/apt.conf.d/50unattended-upgrades
+        mode: 0644
+
+    - name: Enable unattended-upgrades
+      copy:
+        src: ./root/etc/apt/apt.conf.d/20auto-upgrades
+        dest: /etc/apt/apt.conf.d/20auto-upgrades
+        mode: 0644
+
     # ----------------------------------------------------------------------------------------------
     # SSH configuration.
     # ----------------------------------------------------------------------------------------------

root/etc/apt/apt.conf.d/50unattended-upgrades

@@ -91,7 +91,7 @@ Unattended-Upgrade::Package-Blacklist {
 // If empty or unset then no email is sent, make sure that you
 // have a working mail setup on your system. A package that provides
 // 'mailx' must be installed. E.g. "user@example.com"
-//Unattended-Upgrade::Mail "";
+Unattended-Upgrade::Mail "root";
 
 // Set this value to one of:
 //    "always", "only-on-error" or "on-change"