---
- name: Patch Debian-family hosts
  ansible.builtin.apt:
    state: present
    update_cache: yes
    upgrade: safe
    autoremove: yes
    autoclean: yes
  when: ansible_os_family == 'Debian'
  notify: Reboot if required

    # TODO consider including yum as fallback
- name: Patch RedHat-family hosts
  ansible.builtin.dnf:
    # Updates all packages
    name: "*"
    state: latest
  when: ansible_os_family == 'RedHat'