From d6c2eb5f79917a2df728e6b9f86ceb5022f25d90 Mon Sep 17 00:00:00 2001
From: Ralf Jung <post@ralfj.de>
Date: Sat, 20 Jul 2019 14:18:55 +0200
Subject: [PATCH] configure needrestart to restart when unattended

---
 roles/base/files/needrestart.conf | 2 ++
 roles/base/tasks/main.yml         | 8 +++++---
 2 files changed, 7 insertions(+), 3 deletions(-)
 create mode 100644 roles/base/files/needrestart.conf

diff --git a/roles/base/files/needrestart.conf b/roles/base/files/needrestart.conf
new file mode 100644
index 0000000..b2e1f1a
--- /dev/null
+++ b/roles/base/files/needrestart.conf
@@ -0,0 +1,2 @@
+# Restart when unattended
+$nrconf{restart} = 'a'
diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index 0757dc7..9112430 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -13,9 +13,7 @@
 - name: get rid of packages we do not want
   apt: name=exim4-base,rpcbind,procmail,fetchmail state=absent autoremove=yes
 - name: install some basic tools
-  apt: name=nano,aptitude,rsync,git,mercurial,curl,apt-transport-https,psmisc,dnsutils,tree,htop,acl,libpam-systemd state=latest
-- name: install needrestart (from backports)
-  apt: name=needrestart state=latest default_release={{ansible_distribution_release}}-backports
+  apt: name=nano,aptitude,rsync,git,mercurial,curl,apt-transport-https,psmisc,dnsutils,tree,htop,acl,libpam-systemd,needrestart state=latest
 # configuration
 - name: configure root shell
   copy:
@@ -31,3 +29,7 @@
     dest: /etc/systemd/timesyncd.conf
     src: files/timesyncd.conf
   notify: timesyncd
+- name: configure needrestart
+  copy:
+    dest: /etc/needrestart/conf.d/restart.conf
+    src: files/needrestart.conf
-- 
2.30.2