Daily background updates for Debian systems.

roles/debian_server/files/daily

+#!/bin/sh
+set -eu
+
+apt-get update
+apt-get dist-upgrade --download-only --yes
+apt-get autoclean
+
+if command -v flatpak >/dev/null 2>&1
+then
+    flatpak --system update --appstream
+    flatpak --system update --assumeyes
+    flatpak --system uninstall --unused --assumeyes
+fi

roles/debian_server/files/update.service

+[Unit]
+Description=Background system updates
+ConditionACPower=true
+After=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=daily

roles/debian_server/files/update.timer

+[Unit]
+Description=Background system updates
+
+[Timer]
+OnCalendar=daily
+
+[Install]
+WantedBy=multi-user.target

roles/debian_server/tasks/main.yml

@@ -208,3 +208,36 @@
     mode: preserve
     owner: root
     src: btrfs-backup
+
+- name: Mail aliases
+  loop:
+    - root
+    - nimrod
+  ansible.builtin.lineinfile:
+    backup: true
+    create: true
+    line: '{{ item }}: {{ item }}@shore.co.il'
+    path: /etc/aliases
+    regexp: '^{{ item }}:'
+    state: present
+
+- name: Copy update script
+  ansible.builtin.copy:
+    dest: /usr/local/sbin/daily
+    mode: 0o0755
+    src: daily
+
+- name: Copy update service and timer
+  loop:
+    - update.service
+    - update.timer
+  ansible.builtin.copy:
+    dest: /etc/systemd/system
+    mode: 0o0644
+    src: '{{ item }}'
+
+- name: Enable the update timer
+  ansible.builtin.systemd:
+    enabled: true
+    name: update.timer
+    state: started