ansible-playbooks/roles/common/templates/apt/auto-upgrades.stretch.j2

{% if ansible_prolog -%}
{% from 'templates/ansible/prolog.j2' import prolog with context %}
{{ prolog('//') }}
{% endif -%}

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
Unattended-Upgrade::Mail "root";
//Unattended-Upgrade::MailOnlyOnError "true";

// Automatically upgrade packages from these origin patterns
Unattended-Upgrade::Origins-Pattern {
    // Archive or Suite based matching:
    // Note that this will silently match a different release after
    // migration to the specified archive (e.g. testing becomes the
    // new stable).
    "o=Debian,a=stretch";
    "o=Debian,a=stretch-updates";
//  "o=Debian,a=stretch-proposed-updates";
    "origin=Debian,archive=stretch,label=Debian-Security";
{% if auto_upgrade_additional_patterns %}
{% for pattern in auto_upgrade_additional_patterns %}
    "{{ pattern }}";
{% endfor %}
{% endif %}
};