setup/roles/common/tasks/main.yml

- name: Enable non-free packages
  become: true
  replace:
    path: "/etc/apt/sources.list"
    regexp: "^(.*main.*?)( contrib non-free)?$"
    replace: '\1 contrib non-free'
- name: APT upgrade
  become: true
  apt:
    autoremove: true
    upgrade: yes
    state: latest
    update_cache: yes
    cache_valid_time: 86400 # One day
  tags: update