---
- hosts: all
  become: true
  vars_files:
    - ../secret
  tasks:
    - name: Update cache
      apt:
        update_cache: yes
      when: ansible_facts['os_family'] == "Debian"
    - name: Upgrade packages
      apt:
        name: "*"
        state: latest
      when: ansible_facts['os_family'] == "Debian"
    - name: Autoremove
      apt:
        autoremove: yes
      when: ansible_facts['os_family'] == "Debian"