- name: Upgrade packages
  become: true
  ansible.builtin.apt:
    install_recommends: false
    update_cache: true
    upgrade: dist
  notify: apt_reboot

- name: Reboot if necessary
  ansible.builtin.meta: flush_handlers

- name: Clean up dependencies
  become: true
  ansible.builtin.apt:
    autoremove: true
    purge: true
  notify: apt_reboot

- name: Reboot if necessary
  ansible.builtin.meta: flush_handlers

- name: Install extra packages
  become: true
  ansible.builtin.apt:
    install_recommends: false
    name: '{{ apt_extra_packages }}'
    state: present

- name: Configure unattended-upgrades
  ansible.builtin.include_tasks: unattended_upgrades.yml
  when: apt_unattended