readd automated security updates

Signed-off-by: Thomas Sjögren <[email protected]>

src/automated-security-updates.yml

@@ -0,0 +1,9 @@
+---
+- name: Configure for automated security updates
+  hosts: all
+  become: true
+  become_method: ansible.builtin.sudo
+  tasks:
+    - name: Set up automated security updates
+      ansible.builtin.include_role:
+        name: automated_security_updates

src/base.yml

@@ -4,6 +4,9 @@
   become: true
   become_method: ansible.builtin.sudo
   tasks:
+    - name: Install and configure automated security updates
+      ansible.builtin.include_role:
+        name: automated_security_updates
     - name: Install and configure login banner
       ansible.builtin.include_role:
         name: banner

src/playbook.yml

@@ -2,6 +2,9 @@
 - name: Import base image playbook
   ansible.builtin.import_playbook: base.yml
 
+- name: Import automated security updates playbook
+  ansible.builtin.import_playbook: automated-security-updates.yml
+
 - name: Import UFW playbook
   ansible.builtin.import_playbook: ufw.yml
 

src/requirements.yml

@@ -4,6 +4,8 @@ collections:
 roles:
   - name: amazon_ssm_agent
     src: https://github.com/cisagov/ansible-role-amazon-ssm-agent
+  - name: automated_security_updates
+    src: https://github.com/cisagov/ansible-role-automated-security-updates
   - name: banner
     src: https://github.com/cisagov/ansible-role-banner
   - name: cdm_nessus_agent