From 0cc7d592e9e0b5b7966de308d4a8cc413799bb75 Mon Sep 17 00:00:00 2001
From: L3D <l3d@c3woc.de>
Date: Wed, 27 Jan 2021 00:53:40 +0100
Subject: [PATCH] update

---
 .gitmodules                          | 3 +++
 group_vars/{all.yml => all/vars.yml} | 0
 group_vars/all/vault.yml             | 7 +++++++
 roles/do1jlr.mailserver_preperation  | 2 +-
 roles/gitea                          | 2 +-
 roles/unattended_upgrades            | 1 +
 site.yml                             | 1 +
 7 files changed, 14 insertions(+), 2 deletions(-)
 rename group_vars/{all.yml => all/vars.yml} (100%)
 create mode 100644 group_vars/all/vault.yml
 create mode 160000 roles/unattended_upgrades

diff --git a/.gitmodules b/.gitmodules
index dc2ca04..d7957f2 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -73,3 +73,6 @@
 [submodule "roles/do1jlr.rspamd"]
 	path = roles/do1jlr.rspamd
 	url = https://github.com/roles-ansible/ansible_role_rspamd.git
+[submodule "roles/unattended_upgrades"]
+	path = roles/unattended_upgrades
+	url = https://github.com/jnv/ansible-role-unattended-upgrades.git
diff --git a/group_vars/all.yml b/group_vars/all/vars.yml
similarity index 100%
rename from group_vars/all.yml
rename to group_vars/all/vars.yml
diff --git a/group_vars/all/vault.yml b/group_vars/all/vault.yml
new file mode 100644
index 0000000..383cd08
--- /dev/null
+++ b/group_vars/all/vault.yml
@@ -0,0 +1,7 @@
+$ANSIBLE_VAULT;1.1;AES256
+36663863373338383561336138323362326461643035366564653064343831303331373862373465
+6465396462326630383532376465653965353131623265300a333866303861663238306234326663
+64353530653265333866363938626431326139376136653631626635303430313437333431623637
+3931616565633732320a636166306637383739313666353564646235336332636565363266393961
+63363263626263303535623465633639313865383634323935663363383532336662656662633262
+3537383036623661313530306532376237633132633234613936
diff --git a/roles/do1jlr.mailserver_preperation b/roles/do1jlr.mailserver_preperation
index 8e8441a..45cad04 160000
--- a/roles/do1jlr.mailserver_preperation
+++ b/roles/do1jlr.mailserver_preperation
@@ -1 +1 @@
-Subproject commit 8e8441a576bab17077868ef7cfe81be12fa48246
+Subproject commit 45cad04009b03f11fc901466bf690e42fc16ad19
diff --git a/roles/gitea b/roles/gitea
index cde4a96..a216c60 160000
--- a/roles/gitea
+++ b/roles/gitea
@@ -1 +1 @@
-Subproject commit cde4a964d584670201d2d5aa479da33dcf648eb0
+Subproject commit a216c6093c0d9d6cdbe6e6d4d130d886583c7b59
diff --git a/roles/unattended_upgrades b/roles/unattended_upgrades
new file mode 160000
index 0000000..9960a79
--- /dev/null
+++ b/roles/unattended_upgrades
@@ -0,0 +1 @@
+Subproject commit 9960a79ce0f5530275d674eacd4c5a37d2d5b272
diff --git a/site.yml b/site.yml
index ada0d89..3bca949 100644
--- a/site.yml
+++ b/site.yml
@@ -11,6 +11,7 @@
     - { role: base, tags: [default,packages,base]}
     - { role: ranger, tags: [packages,ranger]}
     - { role: bat, tags: [packages,bat], when: [ansible_os_family == 'Debian']}
+    - { role: unattended_upgrades, tags: [default,unattended,unattended_upgrades,security], become: true, when: ansible_distribution == 'Debian'}
 
 - name: user specific roles for all hosts
   hosts: all