add Unattended-Upgrade

roles/common/handlers/main.yaml

@@ -0,0 +1,12 @@
+---
+
+- name: reload ssh
+  service: name=ssh state=reloaded
+
+- name: update trusted ca debian
+  shell: /usr/sbin/update-ca-certificates
+  when: ansible_os_family == "Debian"
+
+# handlers for etckeeper
+- name: Record changes in etckeeper
+  shell: "if etckeeper unclean; then etckeeper commit '{{ etckeeper_message }}'; fi"