Add unattended upgrades + some other basic settings

roles/common/files/20auto-upgrades

@@ -0,0 +1,2 @@
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";

roles/common/handlers/main.yaml

@@ -1,4 +1,10 @@
-- name: Restart sshd
+- name: restart sshd
   service:
     name: sshd
-    state: restarted
+    state: restarted
+
+- name: restart journal
+  service:
+    name: systemd-journald
+    state: restarted
+    enabled: yes

roles/common/tasks/main.yml

@@ -1,4 +1,5 @@
 ---
 - include: upgrade.yml
 - include: packages.yml
+- include: system.yml
 - include: ssh.yml

roles/common/tasks/ssh.yml

@@ -3,4 +3,4 @@
     dest: "/etc/ssh/sshd_config"
     regexp: "^#?PermitRootLogin "
     line: "PermitRootLogin without-password"
-  notify: "Restart sshd"
+  notify: "restart sshd"

roles/common/tasks/system.yml

@@ -0,0 +1,38 @@
+- name: Set timezone to Berlin
+  community.general.timezone:
+    name: Europe/Berlin
+
+- name: Limit syslogs
+  lineinfile:
+    dest: /etc/systemd/journald.conf
+    regexp: "^#?\\s*SystemMaxFileSize"
+    line: "SystemMaxFileSize=2G"
+  notify: restart journal
+
+- name: Set vim as default editor
+  alternatives:
+    name: editor
+    path: /usr/bin/vim.basic
+
+- name: Allow unattended reboots (1)
+  lineinfile:
+    dest: /etc/apt/apt.conf.d/50unattended-upgrades
+    regexp: "^(//)?Unattended-Upgrade::Automatic-Reboot "
+    line: "Unattended-Upgrade::Automatic-Reboot \"true\";"
+
+- name: Allow unattended reboots (2)
+  lineinfile:
+    dest: /etc/apt/apt.conf.d/50unattended-upgrades
+    regexp: "^(//)?Unattended-Upgrade::Automatic-Reboot-Time "
+    line: "Unattended-Upgrade::Automatic-Reboot-Time \"23:55\";"
+
+- name: Allow more origins for updates
+  lineinfile:
+    dest: /etc/apt/apt.conf.d/50unattended-upgrades
+    regexp: "^(//\\s*)?\"\\$\\{distro_id\\}:\\$\\{distro_codename\\}-updates\";"
+    line: "\"${distro_id}:${distro_codename}-updates\";"
+
+- name: Enable unattended upgrades
+  copy:
+    src: 20auto-upgrades
+    dest: /etc/apt/apt.conf.d/20auto-upgrades