Update

There are several layers of automated and semi-automated update mechanisms in a Momod managed server.

OS Updates

At the OS (Operating System) level the Debian unattended-upgrades package is installed and configured by the similarly named Momod role during play/main. This should ensure security updates are automatically installed. Server Admins will also get email from the server announcing when updates are available and when they’ve been installed.

If you choose to do a manual apt update there are two aliases defined in the Momod shell configuration, update to speed fetching system updates and upgrade to apply updates.

Momod Update Play

There is an update play, play/update.yml to automatically update a few Momod installed softwares. (Currently this only updates certbot and Forgejo but this should be expanded in future as needed.)

It’s a good idea to subscribe to Forgejo’s update RSS feed in your feed reader and to run the Momod update play when an update is relesased.

Running the play:

ansible-playbook play/update.yml