50unattended-upgrades.j2

// Automatically upgrade packages from these (origin, archive) pairs
Unattended-Upgrade::Allowed-Origins {
    // ${distro_id} and ${distro_codename} will be automatically expanded
    "${distro_id} stable";
    "${distro_id} ${distro_codename}-security";

    // Autoupdate Nginx
    "nginx:${distro_codename}";

{% if streisand_openvpn_enabled %}
    // Autoupdate OpenVPN
    "Freight:${distro_codename}";
{% endif %}

{% if streisand_shadowsocks_enabled %}
    // Autoupdate shadowsocks-libev
    "LP-PPA-max-c-lv-shadowsocks-libev:${distro_codename}";
{% endif %}

{% if streisand_tor_enabled %}
    // Autoupdate Tor
    "TorProject:${distro_codename}";
{% endif %}

{% if streisand_wireguard_enabled %}
    // Autoupdate WireGuard
    "LP-PPA-wireguard-wireguard:${distro_codename}";
{% endif %}
};

// List of packages to not update
Unattended-Upgrade::Package-Blacklist {
};

// Do automatic removal of new unused dependencies after the upgrade
// (equivalent to apt-get autoremove)
Unattended-Upgrade::Remove-Unused-Dependencies "true";

// Automatically reboot *WITHOUT CONFIRMATION* if a
// the file /var/run/reboot-required is found after the upgrade
Unattended-Upgrade::Automatic-Reboot "true";

// If automatic reboot is enabled and needed, reboot at the specific
// time instead of immediately
//  Default: "now"
Unattended-Upgrade::Automatic-Reboot-Time "00:00";

// Avoid conffile dpkg prompt by *always* leaving the modified configuration in
// place and putting the new package configuration in a .dpkg-dist file
Dpkg::Options {
   "--force-confdef";
   "--force-confold";
};