// Managed by Ansible (roles/unattended_upgrades) — changes will be overwritten.

Unattended-Upgrade::Origins-Pattern {
{% if unattended_upgrades_security_only %}
        "origin=${distro_id},codename=${distro_codename},label=${distro_id}-Security";
        "origin=${distro_id},codename=${distro_codename}-security,label=${distro_id}-Security";
        "origin=Debian,codename=${distro_codename},label=Debian-Security";
        "origin=Debian,codename=${distro_codename}-security,label=Debian-Security";
{% else %}
        "origin=${distro_id},codename=${distro_codename}";
        "origin=${distro_id},codename=${distro_codename}-security";
        "origin=${distro_id},codename=${distro_codename}-updates";
{% endif %}
{% for origin in unattended_upgrades_origins_extra %}
        "{{ origin }}";
{% endfor %}
};

Unattended-Upgrade::Remove-Unused-Dependencies "{{ unattended_upgrades_remove_unused_deps | lower }}";

Unattended-Upgrade::Automatic-Reboot "{{ unattended_upgrades_auto_reboot | lower }}";
Unattended-Upgrade::Automatic-Reboot-Time "{{ unattended_upgrades_auto_reboot_time }}";

Unattended-Upgrade::SyslogEnable "true";

{% if unattended_upgrades_mail_to %}
Unattended-Upgrade::Mail "{{ unattended_upgrades_mail_to }}";
Unattended-Upgrade::MailOnlyOnError "{{ unattended_upgrades_mail_on_only_error | lower }}";
{% endif %}