90 lines
1.9 KiB
ReStructuredText
90 lines
1.9 KiB
ReStructuredText
|
Unattended-upgrades setup
|
||
|
|
=========================
|
||
|
|
|
||
|
|
Unattended-upgrades setup role. It also installs and configures Postfix as a SMTP relay in order to send emails when target system needs to be rebooted.
|
||
|
|
|
||
|
|
Requirements
|
||
|
|
------------
|
||
|
|
|
||
|
|
This role was written for Debian (11) and requires root privileges.
|
||
|
|
|
||
|
|
Role Variables
|
||
|
|
--------------
|
||
|
|
|
||
|
|
Variables can be found in the `default vars <defaults/main.yml>`_. As a bare minimum you should configure SMTP credentials.
|
||
|
|
|
||
|
|
.. code-block:: yaml
|
||
|
|
|
||
|
|
upgrades_sender: "{{ ansible_user }}@{{ ansible_hostname }}.lan"
|
||
|
|
|
||
|
|
Defines which email unattended-upgrades will use to send emails.
|
||
|
|
|
||
|
|
.. code-block:: yaml
|
||
|
|
|
||
|
|
postfix_hostname: "{{ ansible_hostname }}.lan"
|
||
|
|
|
||
|
|
Configures Postfix hostname.
|
||
|
|
|
||
|
|
.. code-block:: yaml
|
||
|
|
|
||
|
|
smtp_username:
|
||
|
|
smtp_password:
|
||
|
|
smtp_port: 587
|
||
|
|
|
||
|
|
SMTP credentials (required). Port defaults to 587 (STARTTLS).
|
||
|
|
|
||
|
|
.. code-block::yaml
|
||
|
|
|
||
|
|
relay_servername: "{{ smtp_username | regex_search('(?<=@)(.+)\\.[\\w]+$') }}"
|
||
|
|
|
||
|
|
SMTP servername, defaults to ``smtp_username`` domain. If yours differs modify it here.
|
||
|
|
|
||
|
|
.. code-block:: yaml
|
||
|
|
|
||
|
|
custom_smtp_header: false
|
||
|
|
from_header:
|
||
|
|
from_email:
|
||
|
|
|
||
|
|
Customizes SMTP header. Make sure to configure ``from_header`` (added header) and ``from_email`` (email address of FROM) correctly if you enable SMTP headers variable.
|
||
|
|
|
||
|
|
.. code-block:: yaml
|
||
|
|
|
||
|
|
smtp_masquerade: false
|
||
|
|
|
||
|
|
SMTP masquerade allows to replace the FROM statement to the value of ``smtp_username``.
|
||
|
|
|
||
|
|
.. code-block:: yaml
|
||
|
|
|
||
|
|
additional_lists: []
|
||
|
|
|
||
|
|
List of additional sources lists you want to add to unattended-upgrades.
|
||
|
|
|
||
|
|
Dependencies
|
||
|
|
------------
|
||
|
|
|
||
|
|
None.
|
||
|
|
|
||
|
|
Example Playbook
|
||
|
|
----------------
|
||
|
|
|
||
|
|
.. code-block:: yaml
|
||
|
|
|
||
|
|
- name: Deploy automatic upgrades
|
||
|
|
hosts: all
|
||
|
|
become: true
|
||
|
|
vars:
|
||
|
|
smtp_username: user@domain.com
|
||
|
|
smtp_password: pa$$word
|
||
|
|
roles:
|
||
|
|
- role: 'unattended-upgrades'
|
||
|
|
|
||
|
|
License
|
||
|
|
-------
|
||
|
|
|
||
|
|
BSD-3
|
||
|
|
|
||
|
|
Author Information
|
||
|
|
------------------
|
||
|
|
|
||
|
|
Role created by `syrell <https://git.syyrell.com/syrell>`_.
|