add unattended updates

defaults/main.yml

@@ -0,0 +1,2 @@
+update:
+  unattended: no

tasks/main.yml

@@ -1,4 +1,10 @@
 ---
+- name: setup unattended updates
+  apt:
+    name: unattended-upgrades
+    purge: yes
+    state: "{% if update.unattended %}present{% else %}absent{% endif %}"
+
 - name: update
   apt:
     update_cache: yes