--- - name: Install security packages ansible.builtin.apt: name: - unattended-upgrades - logwatch - rkhunter - chkrootkit state: present - name: Configure automatic security updates ansible.builtin.copy: content: | APT::Periodic::Update-Package-Lists "1"; APT::Periodic::Unattended-Upgrade "1"; APT::Periodic::AutocleanInterval "7"; dest: /etc/apt/apt.conf.d/20auto-upgrades owner: root group: root mode: '0644'