---
- name: OS updates
  hosts: infra
  become: true

  tasks:
    - name: Update apt cache and upgrade packages
      apt:
        update_cache: true
        upgrade: safe

    - name: Remove unused packages
      apt:
        autoremove: true
        purge: true