Update first so that we have a cache. If we don’t, this will fail new machines

tasks/main.yml

@@ -1,10 +1,4 @@
 ---
-- name: setup unattended updates
-  apt:
-    name: unattended-upgrades
-    purge: yes
-    state: "{% if update.unattended %}present{% else %}absent{% endif %}"
-
 - name: update
   apt:
     update_cache: yes
@@ -13,6 +7,12 @@
   tags:
   - update
 
+- name: setup unattended updates
+  apt:
+    name: unattended-upgrades
+    purge: yes
+    state: "{% if update.unattended %}present{% else %}absent{% endif %}"
+
 - name: clean
   command: apt-get clean
   changed_when: False