ansible-playbooks/roles/common/templates/apt/auto-upgrades.jessie.j2

{% if ansible_prolog -%}
{% from 'templates/ansible/prolog.j2' import prolog with context %}
{{ prolog('//') }}
{% endif -%}

APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
Unattended-Upgrade::Mail "root";
//Unattended-Upgrade::MailOnlyOnError "true";

// Automatically upgrade packages from these origin patterns
Unattended-Upgrade::Origins-Pattern {
    // Archive or Suite based matching:
    // Note that this will silently match a different release after
    // migration to the specified archive (e.g. testing becomes the
    // new stable).
    "o=Debian,a=stable";
    "o=Debian,a=stable-updates";
//  "o=Debian,a=stable-proposed-updates";
    "origin=Debian,archive=stable,label=Debian-Security";
};