make ansible-lint common.yaml happy

roles/common/tasks/updates.yaml

@@ -1,19 +1,10 @@
 ---
 
-- name: Install unattended Upgrades
-  apt:
-    name:
-      - unattended-upgrades
-      - apt-listchanges
-    state: latest
-  notify: Record changes in etckeeper
-
-
 - name: update Package lists
   cron:
     name: update Package lists
-    hour: "{{3|random(seed=inventory_hostname+'updates')}}"
-    minute: "{{59|random(seed=inventory_hostname+'updates')}}"
+    hour: "{{ 3|random(seed=inventory_hostname+'updates') }}"
+    minute: "{{ 59|random(seed=inventory_hostname+'updates') }}"
     job: /usr/bin/apt-get update > /dev/null
 
 
@@ -21,6 +12,7 @@
   template:
     src: "{{ item }}"
     dest: "/etc/apt/apt.conf.d/{{ item }}"
+    mode: 0644
   with_items:
     - 20auto-upgrades
   notify: Record changes in etckeeper
@@ -30,6 +22,7 @@
   template:
     src: "{{ item }}"
     dest: "/etc/apt/apt.conf.d/{{ item }}"
+    mode: 0644
   with_items:
     - 50unattended-upgrades
   notify: Record changes in etckeeper