---
- name: Refresh apt cache
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: "{{ debian_maintenance_apt_cache_valid_time }}"

- name: Upgrade Debian packages
  ansible.builtin.apt:
    upgrade: "{{ debian_maintenance_upgrade_type }}"

- name: Remove orphaned packages
  ansible.builtin.apt:
    autoremove: "{{ debian_maintenance_autoremove }}"

- name: Clean apt package cache
  ansible.builtin.apt:
    autoclean: "{{ debian_maintenance_autoclean }}"

- name: Check if reboot is required
  ansible.builtin.stat:
    path: /var/run/reboot-required
  register: debian_maintenance_reboot_required_file

- name: Reboot when required by package updates
  ansible.builtin.reboot:
    reboot_timeout: "{{ debian_maintenance_reboot_timeout }}"
    msg: "Reboot initiated by Ansible maintenance playbook"
  when:
    - debian_maintenance_reboot_if_required | bool
    - debian_maintenance_reboot_required_file.stat.exists | default(false)