Martin Bauer
f043606466
Regular playbooks now use state: present, so they no longer upgrade packages as a side effect. This adds two separate, explicit mechanisms to keep the fleet patched instead: - update-packages.yml: ad hoc / to-be-scheduled fleet-wide upgrade (safe by default, dist available via -e), plus update-packages-pinned-example.yml as a template for pinning or bumping a single package outside that. - roles/unattended_upgrades: automatic security-only patching via unattended-upgrades, with a scheduled reboot window and mail left disabled pending a configured MTA. Applied to every host in full.yml and server.yml. Also removes a leftover `upgrade: yes` apt task from pi_standard_setup and server_basic_environment that was still doing a full upgrade on every routine run, defeating the point of the state: present switch. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
68 lines
1.2 KiB
YAML
68 lines
1.2 KiB
YAML
---
|
|
# - hosts: esszimmerradio
|
|
# roles:
|
|
# - pi_standard_setup
|
|
# - pi_squeezelite_custom
|
|
# - pi_shairport
|
|
# - pi_lirc
|
|
# - pi_sispmctl
|
|
#
|
|
|
|
- name: Musikserver Wohnzimmer oben
|
|
hosts: musikserverwohnzimmeroben
|
|
roles:
|
|
- unattended_upgrades
|
|
- pi_standard_setup
|
|
- pi_hifiberry_amp
|
|
- pi_squeezelite_custom
|
|
- pi_shairport
|
|
- pi_irserver
|
|
# - pi_dhtsensor
|
|
- pi_squeezeserver
|
|
|
|
- name: Kitchen pi
|
|
hosts: kitchenpi
|
|
roles:
|
|
- unattended_upgrades
|
|
- pi_standard_setup
|
|
- pi_hifiberry_amp
|
|
- pi_squeezelite_custom
|
|
- pi_shairport
|
|
- pi_lirc
|
|
- pi_dhtsensor
|
|
- pi_disable_onboard_bluetooth
|
|
- bluetooth_monitor
|
|
|
|
- name: Bedroom pi
|
|
hosts: bedroompi
|
|
roles:
|
|
- unattended_upgrades
|
|
- pi_standard_setup
|
|
- pi_squeezelite_custom
|
|
- pi_shairport
|
|
- pi_lirc
|
|
- pi_dhtsensor
|
|
- pi_disable_onboard_bluetooth
|
|
- bluetooth_monitor
|
|
|
|
- name: Musicmouse
|
|
hosts: musicmouse
|
|
roles:
|
|
- unattended_upgrades
|
|
- pi_standard_setup
|
|
- pi_hifiberry_amp
|
|
- pi_musicmouse
|
|
- pi_squeezelite_custom
|
|
- pi_shairport
|
|
- pi_lirc
|
|
- bluetooth_monitor
|
|
|
|
# - hosts: octopi
|
|
# roles:
|
|
# - pi_dhtsensor
|
|
|
|
# - hosts: newrpi
|
|
# roles:
|
|
# - pi_standard_setup
|
|
# - pi_lirc
|