initial commit

roles/system-maintenance/tasks/debian.yaml

@@ -0,0 +1,22 @@
+---
+- name: Update and upgrade apt packages (Debian/Ubuntu)
+  ansible.builtin.apt:
+    upgrade: true
+    update_cache: true
+    cache_valid_time: 21600 # 6 hours
+
+- name: Remove unused packages
+  ansible.builtin.apt:
+    autoremove: true
+    purge: true
+
+- name: Check if reboot required
+  ansible.builtin.stat:
+    path: /var/run/reboot-required
+  register: reboot_required_file
+
+- name: Call reboot handler if reboot required
+  ansible.builtin.debug:
+    msg: "Reboot is required"
+  when: reboot_required_file.stat.exists
+  notify: Reboot system