- name: Install unattended-upgrades package
  ansible.builtin.apt:
    name: unattended-upgrades
    state: present
    update_cache: true

- name: Reconfigure unattended-upgrades
  ansible.builtin.command:
    cmd: dpkg-reconfigure --frontend=noninteractive unattended-upgrades
  register: unattended_upgrades
  failed_when: unattended_upgrades.rc != 0
  changed_when: unattended_upgrades.rc == 0

- name: Enable daily upgrades
  ansible.builtin.systemd_service:
    name: apt-daily-upgrade.timer
    enabled: true
    state: restarted