Add auto-update

* for all hosts, use debops.unattended_upgrades
* for docker compose, install a cron job pulling new images and restarting affected containers

playbooks/deploy.yaml

@@ -81,3 +81,10 @@
   hosts: nginx_hosts:!public_reverse_proxy_hosts
   roles:
     - nginx
+
+- name: Configure unattended upgrades
+  collections: [ 'debops.debops' ]
+  hosts: all
+  become: true
+  roles:
+    - role: unattended_upgrades