---
- hosts: all
  gather_facts: no
  become: yes

  tasks:
    - name: apt update
      ansible.builtin.apt:
        update_cache: yes
        cache_valid_time: 0

    - name: apt full-upgrade
      ansible.builtin.apt:
        upgrade: full
        autoremove: yes
        autoclean: yes