kzbkowski/ansible
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

v1.0.0

Browse Source
This commit is contained in:
Kacper Żbikowski
2026-07-12 08:44:40 +02:00
commit 55991dcb4e
21 changed files with 610 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
templates/50unattended-upgrades.j2 Normal file
View File

@@ -0,0 +1,13 @@
// Zarządzane przez Ansible (playbook_security_baseline.yml) — nie edytuj ręcznie.
// Instaluje wyłącznie aktualizacje bezpieczeństwa, bez automatycznego restartu:
// decyzję o reboot podejmuje operator na podstawie playbook_fleet_report.yml.
Unattended-Upgrade::Origins-Pattern {
"origin=Debian,codename=${distro_codename},label=Debian-Security";
"origin=Debian,codename=${distro_codename}-security,label=Debian-Security";
"origin=Ubuntu,archive=${distro_codename}-security";
};
Unattended-Upgrade::Remove-Unused-Dependencies "true";
Unattended-Upgrade::Automatic-Reboot "false";
Unattended-Upgrade::Automatic-Reboot-WithUsers "false";