fix: [#17] add Debian family conditionals to security updates playbook

Add 'when: ansible_os_family == "Debian"' conditions to all APT and
unattended-upgrades specific tasks to prevent errors on non-Debian systems

Co-authored-by: josecelano <[email protected]>

Author: Copilot

templates/ansible/configure-security-updates.yml

@@ -28,26 +28,30 @@
         line: 'APT::Periodic::Unattended-Upgrade "1";'
         create: true
         backup: true
+      when: ansible_os_family == "Debian"
 
     - name: Enable automatic reboot for security updates
       ansible.builtin.lineinfile:
         path: /etc/apt/apt.conf.d/50unattended-upgrades
         regexp: "^Unattended-Upgrade::Automatic-Reboot"
         line: 'Unattended-Upgrade::Automatic-Reboot "true";'
         backup: true
+      when: ansible_os_family == "Debian"
 
     - name: Set automatic reboot time to 2:00 AM
       ansible.builtin.lineinfile:
         path: /etc/apt/apt.conf.d/50unattended-upgrades
         regexp: "^Unattended-Upgrade::Automatic-Reboot-Time"
         line: 'Unattended-Upgrade::Automatic-Reboot-Time "02:00";'
         backup: true
+      when: ansible_os_family == "Debian"
 
     - name: Enable and start unattended-upgrades service
       ansible.builtin.systemd:
         name: unattended-upgrades
         enabled: true
         state: started
+      when: ansible_os_family == "Debian"
       ignore_errors: true # Ignore in container environments where systemd might not work
 
     - name: Verify unattended-upgrades configuration
@@ -56,6 +60,7 @@
       register: unattended_upgrades_test
       changed_when: false
       failed_when: false # Don't fail on verification errors in test environments
+      when: ansible_os_family == "Debian"
 
     - name: Display verification result
       ansible.builtin.debug: