https://jon.sprig.gs/blog/post/917
One to read: Using Ansible for system updates