make ansible-lint common.yaml happy

roles/common/handlers/main.yaml

@@ -1,10 +1,12 @@
 ---
 
 - name: reload ssh
-  service: name=ssh state=reloaded
+  service:
+    name: ssh
+    state: reloaded
 
 - name: update trusted ca debian
-  shell: /usr/sbin/update-ca-certificates
+  command: /usr/sbin/update-ca-certificates
   when: ansible_os_family == "Debian"
 
 # handlers for etckeeper

roles/common/tasks/main.yaml

@@ -1,6 +1,6 @@
 ---
 
+- import_tasks: packages.yaml
+
 # Install unattended Upgrades
 - import_tasks: updates.yaml
-
-- import_tasks: packages.yaml

roles/common/tasks/packages.yaml

@@ -7,4 +7,6 @@
       - htop
       - telnet
       - aptitude
-    state: latest
+      - apt-listchanges
+      - unattended-upgrades
+    state: present

roles/common/tasks/updates.yaml

@@ -1,19 +1,10 @@
 ---
 
-- name: Install unattended Upgrades
-  apt:
-    name:
-      - unattended-upgrades
-      - apt-listchanges
-    state: latest
-  notify: Record changes in etckeeper
-
-
 - name: update Package lists
   cron:
     name: update Package lists
-    hour: "{{3|random(seed=inventory_hostname+'updates')}}"
-    minute: "{{59|random(seed=inventory_hostname+'updates')}}"
+    hour: "{{ 3|random(seed=inventory_hostname+'updates') }}"
+    minute: "{{ 59|random(seed=inventory_hostname+'updates') }}"
     job: /usr/bin/apt-get update > /dev/null
 
 
@@ -21,6 +12,7 @@
   template:
     src: "{{ item }}"
     dest: "/etc/apt/apt.conf.d/{{ item }}"
+    mode: 0644
   with_items:
     - 20auto-upgrades
   notify: Record changes in etckeeper
@@ -30,6 +22,7 @@
   template:
     src: "{{ item }}"
     dest: "/etc/apt/apt.conf.d/{{ item }}"
+    mode: 0644
   with_items:
     - 50unattended-upgrades
   notify: Record changes in etckeeper