ansible/roles/baseconfig/tasks/apt-listchanges.yml

---
# Install apt-listchanges
- name: Install apt-listchanges
  when: ansible_os_family == "Debian"
  apt:
    name: apt-listchanges
    state: present
    update_cache: true
  register: apt_result
  retries: 3
  until: apt_result is succeeded

# Send email when there is something new
- name: Configure apt-listchanges
  ini_file:
    path: /etc/apt/listchanges.conf
    no_extra_spaces: true
    section: apt
    option: "{{ item.option }}"
    value: "{{ item.value }}"
    state: present
  loop:
    - option: confirm
      value: "true"

    - option: email_address
      value: "{{ monitoring_mail }}"

    - option: which
      value: both
...