- name: Checking if it's necessary to update
  meta: end_host
  when: update_enabled is not defined or not update_enabled
- name: update index of all packages
  ansible.builtin.apt:
    update_cache: true
    force_apt_get: true
- name: update all packages to their latest version
  ansible.builtin.apt:
    name: "*"
    state: latest
    force_apt_get: true
- name: upgrade the OS (apt-get full-upgrade)
  ansible.builtin.apt:
    upgrade: full
    force_apt_get: true
- name: autoremove packages unused dependency packages
  ansible.builtin.apt:
    autoremove: true
    force_apt_get: true