---
- hosts: all,!pve,!pbs
  roles:
    - { role: hifis-net.unattended_upgrades,
        become: true,
        tags: unattended,
        when: "ansible_facts['distribution'] == 'Ubuntu'"}