common/templates/apt/conf.d/50unattended-upgrades.Debian.j2

50 lines
1.7 KiB
Django/Jinja

Unattended-Upgrade::Origins-Pattern {
# debian
"origin=Debian,codename=${distro_codename}";
"origin=Debian,codename=${distro_codename}-updates";
"origin=Debian,codename=${distro_codename}-security";
# crowdsec
"origin=packagecloud.io/crowdsec/crowdsec,label=crowdsec";
# docker
"origin=Docker,label=Docker";
# gitlab-ce
"origin=packages.gitlab.com,label=gitlab-ce";
# tailscale
"origin=Tailscale,codename=${distro_codename},label=Tailscale";
# zabbix
"origin=Zabbix,codename=${distro_codename},label=zabbix";
"origin=zabbix,codename=${distro_codename},label=zabbix";
};
Unattended-Upgrade::Package-Blacklist {
};
# dpkg | default > old
Dpkg::Options {
"--force-confdef";
"--force-confold";
};
# auto upgrade packages
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
Unattended-Upgrade::DevRelease "{{ apt_devrelease | default('false') }}";
Unattended-Upgrade::AutoFixInterruptedDpkg "{{ apt_autofix_interrupted_dpkg | default('true') }}";
Unattended-Upgrade::Remove-Unused-Kernel-Packages "{{ apt_remove_unused_kernel_packages | default('true') }}";
Unattended-Upgrade::Remove-New-Unused-Dependencies "{{ apt_remove_new_unused_dependancies | default('true') }}";
Unattended-Upgrade::Remove-Unused-Dependencies "{{ apt_remove_unused_dependancies | default('true') }}";
# auto reboot
Unattended-Upgrade::Automatic-Reboot "{{ apt_automatic_reboot }}";
Unattended-Upgrade::Automatic-Reboot-WithUsers "{{ apt_automatic_reboot_with_users | default('true') }}";
Unattended-Upgrade::Automatic-Reboot-Time "{{ apt_automatic_reboot_time }}";
# syslog
Unattended-Upgrade::SyslogEnable "{{ apt_syslog_enable | default('true') }}";
Unattended-Upgrade::SyslogFacility "{{ apt_syslog_facility | default('daemon') }}";