ansible/roles/linux_updates/tasks/main.yml

---
- name: Linux Updates 
  block:
    - name: update apt cache
      apt: 
         update_cache: yes
    #     cache_valid_time: 0

    - name: read upgradable packages
      shell: apt list --upgradable 
      register: apt_upgradeable
      changed_when: false

    - name: upgrade a server
      apt:
         #update_cache: yes
         upgrade: dist
      register: apt_upgrade
      ignore_errors: True

    - name: delete old packages
      apt: autoclean=yes
      register: apt_autoclean

    - name: check for deleted files
      shell: lsof +L1 -R
      register: lsof

      #- debug: var=apt_upgrade
      #  with_items: 
      #     - apt_autoclean
      #     - apt_upgrade
           #   - lsof

    ## set color green 
    - set_fact:
        color: "#00CC33"
        title_status: "successfully"
      when: apt_upgrade.failed == false

    - mail: 
            subject: "[U] {{ ansible_fqdn }} # updated {{ title_status }}"
            to: update <erdo@ichalsroot.de>
            body: "{{ lookup('template', 'templates/mail_body.j2') }}"
            subtype: html
      delegate_to: localhost
      when: apt_upgrade.changed or apt_upgrade.failed == true
  when: ansible_os_family == "Debian"