---
- name: Update apt cache
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600

- name: Install base packages
  ansible.builtin.apt:
    name: "{{ common_base_packages }}"
    state: present

- name: Install extra host-specific packages (if defined)
  ansible.builtin.apt:
    name: "{{ extra_packages }}"
    state: present
  when: extra_packages is defined

- name: Enable unattended-upgrades
  ansible.builtin.apt:
    name: unattended-upgrades
    state: present
  when: unattended_upgrades_enabled | bool

- name: Configure unattended-upgrades to auto-reboot if needed
  ansible.builtin.copy:
    dest: /etc/apt/apt.conf.d/52unattended-upgrades-local
    content: |
      Unattended-Upgrade::Automatic-Reboot "true";
      Unattended-Upgrade::Automatic-Reboot-Time "03:30";
    mode: "0644"
  when: unattended_upgrades_enabled | bool