First patching playbook (WIP)

roles/patching/handlers/main.yml

@@ -0,0 +1,4 @@
+---
+- name: Reboot if required
+  ansible.builtin.reboot:
+    reboot_timeout: 600

roles/patching/tasks/main.yml

@@ -0,0 +1,10 @@
+---
+- name: Patch Debian-family hosts
+  ansible.builtin.apt:
+    state: present
+    update_cache: yes
+    upgrade: safe
+    autoremove: yes
+    autoclean: yes
+  when: ansible_os_family == 'Debian'
+  notify: Reboot if required