ansible/roles/linux_updates/tasks/main.yml

---
- name: update apt cache
  apt: 
     update_cache: yes
#     cache_valid_time: 0
  when: ansible_os_family == "Debian"

- name: read upgradable packages
  shell:
    apt list --upgradable 
    register: apt_upgradeable
    when: ansible_os_family == "Debian"
  changed_when: false

- name: upgrade a server
  apt:
     #update_cache: yes
     upgrade: dist
  register: apt_upgrade
  when: ansible_os_family == "Debian"
  ignore_errors: True

- name: delete old packages
  apt: autoclean=yes
  register: apt_autoclean
  when: ansible_os_family == "Debian"

- name: check for deleted files
  shell: lsof +L1 -R
  register: lsof
  when: ansible_os_family == "Debian"

  #- debug: var=apt_upgrade
  #  with_items: 
  #     - apt_autoclean
  #     - apt_upgrade
       #   - lsof

## set color green 
- set_fact:
    color: "#00CC33"
    title_status: "successfully"
  when: apt_upgrade.failed == false

- mail: 
        subject: "[U] {{ ansible_fqdn }} # updated {{ title_status }}"
        to: update <erdo@ichalsroot.de>
        body: "{{ lookup('template', 'templates/mail_body.j2') }}"
        subtype: html
  delegate_to: localhost
  when: ansible_os_family == "Debian" and ( apt_upgrade.changed or apt_upgrade.failed == true )