ansible-roles/system/base/unattended_upgrades/tasks/main.yml

---
- name: "install unattended-upgrades"
  ansible.builtin.apt:
    name: "unattended-upgrades"

- name: "configure unattended-upgrades"
  ansible.builtin.template:
    src: "./50unattended-upgrades.j2"
    dest: "/etc/apt/apt.conf.d/50unattended-upgrades"
    mode: 0644

- name: "enable unattended-upgrades"
  ansible.builtin.template:
    src: "./20auto-upgrades.j2"
    dest: "/etc/apt/apt.conf.d/20auto-upgrades"
    mode: 0644