// Ansible managed

Unattended-Upgrade::Origins-Pattern {
      "o=Debian,n=${distro_codename}";
      "o=Debian,n=${distro_codename},l=Debian-Security";
      "o=Debian,n=${distro_codename}-backports";
};

// Send email to this address for problems or packages upgrades
Unattended-Upgrade::Mail "root";

// Set this value to "true" to get emails only on errors. Default
// is to always send a mail if Unattended-Upgrade::Mail is set
Unattended-Upgrade::MailOnlyOnError "true";

// Automatically reboot *WITHOUT CONFIRMATION* if
// the file /var/run/reboot-required is found after the upgrade
Unattended-Upgrade::Automatic-Reboot "false";


// If conffiles have been modified: keep the modifications
// If conffiles are untouched: install the package version
//
// Unattended-upgrade does not update packages otherwise and does not send
// mails either because this is considered a WARNING. Re-evaluate for Buster+:
// https://github.com/mvo5/unattended-upgrades/pull/92
Dpkg::Options {
  "--force-confdef";
  "--force-confold";
};