Add os-update playbook

.gitea/workflows/ansible.yml

@@ -17,6 +17,7 @@ on:
           - gitea.yml
           - vaultwarden.yml
           - runner.yml
+          - os-update.yml
 
 jobs:
   ansible:

ansible/os-update.yml

@@ -0,0 +1,15 @@
+---
+- name: OS updates
+  hosts: infra
+  become: true
+
+  tasks:
+    - name: Update apt cache and upgrade packages
+      apt:
+        update_cache: true
+        upgrade: safe
+
+    - name: Remove unused packages
+      apt:
+        autoremove: true
+        purge: true