|
|
@@ -0,0 +1,26 @@
|
|
|
+{% if ansible_prolog -%}
|
|
|
+{% from 'templates/ansible/prolog.j2' import prolog with context %}
|
|
|
+{{ prolog('//') }}
|
|
|
+{% endif -%}
|
|
|
+
|
|
|
+APT::Periodic::Update-Package-Lists "1";
|
|
|
+APT::Periodic::Unattended-Upgrade "1";
|
|
|
+Unattended-Upgrade::Mail "root";
|
|
|
+//Unattended-Upgrade::MailOnlyOnError "true";
|
|
|
+
|
|
|
+// Automatically upgrade packages from these origin patterns
|
|
|
+Unattended-Upgrade::Origins-Pattern {
|
|
|
+ // Archive or Suite based matching:
|
|
|
+ // Note that this will silently match a different release after
|
|
|
+ // migration to the specified archive (e.g. testing becomes the
|
|
|
+ // new stable).
|
|
|
+ "o=Debian,a=stretch";
|
|
|
+ "o=Debian,a=stretch-updates";
|
|
|
+// "o=Debian,a=stretch-proposed-updates";
|
|
|
+ "origin=Debian,archive=stretch,label=Debian-Security";
|
|
|
+{% if auto_upgrade_additional_patterns %}
|
|
|
+{% for pattern in auto_upgrade_additional_patterns %}
|
|
|
+ "{{ pattern }}";
|
|
|
+{% endfor %}
|
|
|
+{% endif %}
|
|
|
+};
|
