Run unattended-upgrades for all repos/origins

Per default unattended-upgrades is configured to only update/upgrade packages
from official Debian and Debian Security repos. This change removes all
limitations.

files/50unattended-upgrades

@@ -0,0 +1,6 @@
+Unattended-Upgrade::Origins-Pattern {
+	"origin=*";
+};
+
+Unattended-Upgrade::Package-Blacklist {
+};

tasks/main.yml

@@ -7,12 +7,21 @@
   tags:
   - update
 
-- name: setup unattended updates
+- name: install unattended-upgrades
   apt:
     name: unattended-upgrades
     purge: yes
     state: "{% if update.unattended %}present{% else %}absent{% endif %}"
 
+- name: configure unattended-upgrades
+  ansible.builtin.copy:
+    src: "50unattended-upgrades"
+    dest: "/etc/apt/apt.conf.d/50unattended-upgrades"
+    owner: root
+    group: root
+    mode: 0644
+  when: update.unattended
+
 - name: clean
   command: apt-get clean
   changed_when: False