From c6205045c53b09e84b25917ea5fb84b8e36d9c20 Mon Sep 17 00:00:00 2001
From: Christoph <ckubu@oopen.de>
Date: Sun, 9 Aug 2026 00:33:51 +0200
Subject: [PATCH] feat(o45): add configuration files for o45 host and update
 apt tasks for compatibility

---
 roles/common/tasks/apt.yml                |  6 +++---
 roles/common/tasks/basic.yml              | 26 ++++++++---------------
 roles/common/tasks/caching-nameserver.yml |  6 +++---
 3 files changed, 15 insertions(+), 23 deletions(-)

diff --git a/roles/common/tasks/apt.yml b/roles/common/tasks/apt.yml
index 1666b4c..ea64992 100644
--- a/roles/common/tasks/apt.yml
+++ b/roles/common/tasks/apt.yml
@@ -166,10 +166,10 @@
     - apt-configuration
 
 - name: (apt.yml) apt update
-  ansible.builtin.apt:
-    update_cache: true
-    cache_valid_time: "{{ 0 if common_apt_config_updated is defined and common_apt_config_updated.changed else apt_update_cache_valid_time }}"
+  ansible.builtin.command: apt-get update # noqa: command-instead-of-module
   changed_when: false
+  environment:
+    DEBIAN_FRONTEND: noninteractive
   when: apt_update|bool
   tags:
     - apt-update
diff --git a/roles/common/tasks/basic.yml b/roles/common/tasks/basic.yml
index e328917..4bc94fc 100644
--- a/roles/common/tasks/basic.yml
+++ b/roles/common/tasks/basic.yml
@@ -224,28 +224,20 @@
   tags:
     - unattended-upgrades
 
-- name: (basic.yml) check if /etc/apt/apt.conf.d/20auto-upgrades exists
-  ansible.builtin.stat:
-    path: /etc/apt/apt.conf.d/20auto-upgrades
-  register: common_ua_enabled
+- name: (basic.yml) configure auto-upgrades periodic settings
+  ansible.builtin.copy:
+    dest: /etc/apt/apt.conf.d/20auto-upgrades
+    content: |
+      APT::Periodic::Update-Package-Lists "1";
+      APT::Periodic::Unattended-Upgrade "1";
+    owner: root
+    group: root
+    mode: "0644"
   when:
     - ansible_facts['distribution'] == "Debian"
   tags:
     - unattended-upgrades
 
-- name: (basic.yml) activate unattended upgrades
-  ansible.builtin.command:
-    cmd: dpkg-reconfigure -plow unattended-upgrades
-    creates: /etc/apt/apt.conf.d/20auto-upgrades
-  environment:
-    DEBIAN_FRONTEND: noninteractive
-    DEBCONF_NONINTERACTIVE_SEEN: "true"
-  when:
-    - ansible_facts['distribution'] == "Debian"
-    - not common_ua_enabled.stat.exists
-  tags:
-    - unattended-upgrades
-
 - name: (basic.yml) copy apt-listchanges.conf
   ansible.builtin.template:
     src: etc/apt/listchanges.conf.j2
diff --git a/roles/common/tasks/caching-nameserver.yml b/roles/common/tasks/caching-nameserver.yml
index 461af73..09d989a 100644
--- a/roles/common/tasks/caching-nameserver.yml
+++ b/roles/common/tasks/caching-nameserver.yml
@@ -4,10 +4,10 @@
 # ---
 
 - name: (caching-nameserver.yml) update
-  ansible.builtin.apt:
-    update_cache: true
-    cache_valid_time: "{{ 0 if common_apt_config_updated is defined and common_apt_config_updated.changed else apt_update_cache_valid_time }}"
+  ansible.builtin.command: apt-get update # noqa: command-instead-of-module
   changed_when: false
+  environment:
+    DEBIAN_FRONTEND: noninteractive
   when:
     - ansible_facts["distribution"] == "Debian"
     - apt_update|bool