Create dedicated ansible-pull playbook with basic maintenance tasks, use it

pull.yml

@@ -0,0 +1,12 @@
+#!/usr/bin/env ansible-playbook
+# vim:ft=ansible:
+---
+- hosts: all
+  tasks:
+    - name: manage apt packages
+      block:
+        - name: update apt packages
+          apt: upgrade=yes update_cache=yes cache_valid_time=86400
+        - name: autoremove
+          apt: autoremove=yes
+      when: ansible_os_family == "Debian"

roles/ansible-pull/defaults/main.yml

@@ -2,5 +2,5 @@
 ansible_pull_boot_delay: 15min
 ansible_pull_commit: master
 ansible_pull_time: "*-*-* 01:00:00"
-ansible_pull_playbook: site.yml
+ansible_pull_playbook: pull.yml
 ansible_pull_skip_tags: "skip-pull"