infra-nimbus/ansible/upgrade.yml

- name: Update and upgrade apt packages
  serial: 1
  become: true
  gather_facts: false
  hosts: all
  tasks:
    - name: Upgrade packages
      apt:
        upgrade: true
        update_cache: true
        cache_valid_time: 86400
    - name: Remove unused packages
      apt:
        autoremove: true