ansible/roles/self-updating-system/templates/unattended-upgrades.conf


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

// Install in /etc/apt/apt.conf.d/
// Configure unattended-upgrades to work and to apply security
// updates, and then reboot during the night.

Unattended-Upgrade::Origins-Pattern {
        "origin=Debian,codename={{ distro }},label=Debian-Security";
};

Unattended-Upgrade::Mail "root";
Unattended-Upgrade::Remove-Unused-Dependencies "true";
Unattended-Upgrade::Automatic-Reboot "true";

APT::Periodic::Enable "1";
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Download-Upgradeable-Packages "1";
APT::Periodic::Unattended-Upgrade "1";
APT::Periodic::AutocleanInterval "1";
APT::Periodic::MaxAge "1";