2 files changed, 36 insertions, 0 deletions
diff --git a/roles/apt/handlers/main.yml b/roles/apt/handlers/main.yml
new file mode 100644
index 0000000..625a8af
--- /dev/null
+++ b/roles/apt/handlers/main.yml
@@ -0,0 +1,16 @@
+- name: Reboot
+  ansible.builtin.reboot:
+  args:
+    # 3 minutes is plenty.
+    reboot_timeout: 180
+  # Don't reboot yourself accidentally:
+  when: 'ansible_env["SSH_CLIENT"].split()[0] not in ansible_all_ipv4_addresses'
+  become: true
+  listen: reboot
+
+- name: Wait for connectivity
+  ansible.builtin.wait_for_connection:
+  args:
+    # 3 minutes is plenty.
+    timeout: 180
+  listen: reboot
diff --git a/roles/apt/tasks/main.yml b/roles/apt/tasks/main.yml
new file mode 100644
index 0000000..f26a1f7
--- /dev/null
+++ b/roles/apt/tasks/main.yml
@@ -0,0 +1,20 @@
+- name: Upgrade packages
+  become: true
+  ansible.builtin.apt:
+    install_recommends: false
+    update_cache: true
+    upgrade: dist
+  notify: reboot
+
+- name: Reboot if necessary
+  ansible.builtin.meta: flush_handlers
+
+- name: Clean up dependencies
+  become: true
+  ansible.builtin.apt:
+    autoremove: true
+    purge: true
+  notify: reboot
+
+- name: Reboot if necessary
+  ansible.builtin.meta: flush_handlers