Enable automatic updates

Theoretically, this might break things, but Fedora is quite stable, and
I don't think this server is critical enough that being secure is less
important than never changing.

Author: QuLogic

matplotlib.org.yml

@@ -41,7 +41,9 @@
 
         - name: Install server maintenance
           ansible.builtin.dnf:
-            name: "fail2ban"
+            name:
+              - dnf-automatic
+              - fail2ban
             state: present
 
         - name: Install web server requirements
@@ -64,6 +66,14 @@
               - podman
             state: present
 
+    # Automatic updates
+    # #################
+    - name: Enable automatic updates
+      ansible.builtin.systemd:
+        name: dnf-automatic-install.timer
+        enabled: true
+        state: started
+
     # Firewall setup
     # ##############
     - name: Setup firewall