From 4fbc4ad3175e74a46db7d23c77dbd97192181496 Mon Sep 17 00:00:00 2001
From: Ruakij <ruakij@ruekov.eu>
Date: Mon, 26 Oct 2026 14:17:53 +0000
Subject: [PATCH] unattended_upgrades: apt-listchanges sends no mails

---
 unattended_upgrades/tasks/main.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/unattended_upgrades/tasks/main.yml b/unattended_upgrades/tasks/main.yml
index 5ea73cc..7eb5955 100644
--- a/unattended_upgrades/tasks/main.yml
+++ b/unattended_upgrades/tasks/main.yml
@@ -23,6 +23,21 @@
     dest: /etc/apt/apt.conf.d/52unattended-upgrades-local
     mode: "0644"
 
+# Debian installs apt-listchanges with email_address=root, which mails the NEWS of every
+# unattended upgrade through the mail relay.
+- name: Check for the apt-listchanges config
+  ansible.builtin.stat:
+    path: /etc/apt/listchanges.conf
+  register: unattended_upgrades_listchanges
+
+- name: Disable the apt-listchanges mails
+  ansible.builtin.lineinfile:
+    path: /etc/apt/listchanges.conf
+    regexp: '^email_address='
+    line: email_address=none
+    insertafter: '^\[apt\]'
+  when: unattended_upgrades_listchanges.stat.exists
+
 - name: Enable the apt timers
   ansible.builtin.systemd:
     name: "{{ item }}"