---
- name: Install unattended-upgrades
  apt:
    name: unattended-upgrades

- name: Configure unattended-upgrades
  template:
    src: "{{ item }}.j2"
    dest: "/etc/apt/apt.conf.d/{{ item }}"
    owner: root
    mode: u=rw,g=r,o=r
  loop:
    - 20auto-upgrades
    - 50unattended-upgrades

- name: Install debsums
  apt:
    name: debsums
...