---
- name: setup unattended updates
  apt:
    name: unattended-upgrades
    purge: yes
    state: "{% if update.unattended %}present{% else %}absent{% endif %}"

- name: update
  apt:
    update_cache: yes
    cache_valid_time: 600
    upgrade: dist
  tags:
  - update

- name: clean
  command: apt-get clean
  changed_when: False
  args:
    warn: False
  tags:
  - update