First patching playbook (WIP)

inventory/lab/inventory.yml

@@ -13,6 +13,3 @@ all:
         ubu24:
           ansible_host: 127.0.0.1
           ansible_port: 2223
-        alma9:
-          ansible_host: 127.0.0.1
-          ansible_port: 2222

playbooks/patching.yml

@@ -0,0 +1,9 @@
+---
+- name: Patch Linux servers
+  hosts:
+    - all
+  become: true
+
+  roles:
+    - patching
+

playbooks/webservers.yml

@@ -1,8 +0,0 @@
----
-- name: Configure webserver with nginx
-  hosts:
-    - aton
-  become: true
-
-  roles:
-    - nginx

roles/patching/handlers/main.yml

@@ -0,0 +1,4 @@
+---
+- name: Reboot if required
+  ansible.builtin.reboot:
+    reboot_timeout: 600

roles/patching/tasks/main.yml

@@ -0,0 +1,10 @@
+---
+- name: Patch Debian-family hosts
+  ansible.builtin.apt:
+    state: present
+    update_cache: yes
+    upgrade: safe
+    autoremove: yes
+    autoclean: yes
+  when: ansible_os_family == 'Debian'
+  notify: Reboot if required