- name: Configure 'needrestart' package
  ansible.builtin.lineinfile:
    path: /etc/needrestart/needrestart.conf
    regexp: "{{ item.regexp }}"
    line: "{{ item.line }}"
  loop:
    - regexp: "^#\\$nrconf\\{restart\\} = 'i';"
      line: "$nrconf{restart} = 'a';"
    - regexp: "^#\\$nrconf\\{kernelhints\\} = -1;"
      line: "$nrconf{kernelhints} = -1;"

- name: Install additional packages
  ansible.builtin.apt:
    name: "{{ item }}"
    state: latest
    update_cache: yes
  loop: "{{ packages }}"

- name: Upgrade all packages
  ansible.builtin.apt:
    name: "*"
    state: latest
    update_cache: yes

- name: Cleanup
  ansible.builtin.apt:
    autoremove: yes
    purge: yes