Clément Désiles
b94743567f
Detect drift between the running kernel and the newest installed one (Arch: /usr/lib/modules vs uname -r; Debian: /var/run/reboot-required) and push a weekly ntfy reminder until the host is rebooted. Also bundles the in-flight ignore-packages feature and hostname refactor in the autoupdate script.
57 lines
2.0 KiB
YAML
57 lines
2.0 KiB
YAML
---
|
|
# sys_autoupdate_ntfy_topic: "" # Intentionally undefined - role will fail if not set
|
|
|
|
sys_autoupdate_ntfy_server: https://ntfy.sh
|
|
|
|
# sys_autoupdate_ntfy_token: "" # Intentionally undefined - unauthenticated if not set
|
|
|
|
sys_autoupdate_script_path: /usr/local/bin/sys-autoupdate.sh
|
|
|
|
# Schedule: daily at 04:00 with up to 60min jitter
|
|
sys_autoupdate_update_hour: 4
|
|
sys_autoupdate_update_minute: 0
|
|
sys_autoupdate_randomized_delay: 60m
|
|
|
|
# Arch Linux only: check archlinux.org/news before updating
|
|
# Ignored on Debian (sys_autoupdate_has_news_check is false in vars/debian.yml)
|
|
sys_autoupdate_check_news: true
|
|
sys_autoupdate_news_hours: 24
|
|
|
|
# Kernel reboot check cadence: notify drift (running vs installed kernel) only
|
|
# on this day of the week (1=Monday .. 7=Sunday) to avoid daily nagging.
|
|
sys_autoupdate_reboot_notify_weekday: 1
|
|
|
|
sys_autoupdate_allow_downgrade: false
|
|
|
|
# Packages excluded from auto-update.
|
|
# Arch: passed as `pacman --ignore=pkg1,pkg2`
|
|
# Debian/Ubuntu: reconciled via `apt-mark hold` / `apt-mark unhold` on each run
|
|
#
|
|
# Common use case: hold kernel back when running out-of-tree modules (ZFS DKMS,
|
|
# Nvidia, VirtualBox, etc.). When holding the kernel, also hold matching headers
|
|
# and any DKMS modules to keep them in lockstep.
|
|
#
|
|
# Example (Arch with ZFS DKMS):
|
|
# sys_autoupdate_ignore_packages:
|
|
# - linux
|
|
# - linux-headers
|
|
# - zfs-dkms
|
|
# - zfs-utils
|
|
#
|
|
# Example (Debian/Ubuntu with ZFS DKMS):
|
|
# sys_autoupdate_ignore_packages:
|
|
# - linux-image-generic
|
|
# - linux-headers-generic
|
|
# - zfs-dkms
|
|
sys_autoupdate_ignore_packages: []
|
|
|
|
# Podman image auto-update (rootless, runs as ansible_user)
|
|
# Pulls latest images via podman-compose and recreates containers if changed
|
|
sys_autoupdate_podman_enabled: true
|
|
sys_autoupdate_podman_projects_dir: "{{ podman_projects_dir | default('/opt/podman') }}"
|
|
|
|
# Prune images older than this duration after update.
|
|
# Format: hours suffix (e.g. 720h = 30 days). Set to "" to disable age-based prune
|
|
# (only dangling images will be removed in that case).
|
|
sys_autoupdate_podman_prune_until: "720h"
|