From 396f6cd7118a2f3ffea3430a73bdf0c2f10c4df3 Mon Sep 17 00:00:00 2001
From: Hyperling <me@hyperling.com>
Date: Sat, 6 Feb 2021 11:02:29 -0600
Subject: [PATCH] Partition FreeBSD cron jobs. Add security update.

---
 local.yml                      |  4 +++-
 tasks/freebsd/cron/ansible.yml | 20 ++++++++++++++++++++
 tasks/general/cron/ansible.yml | 10 ----------
 3 files changed, 23 insertions(+), 11 deletions(-)
 create mode 100644 tasks/freebsd/cron/ansible.yml

diff --git a/local.yml b/local.yml
index e57e7f7..5f49dc0 100644
--- a/local.yml
+++ b/local.yml
@@ -29,7 +29,9 @@
     - include: tasks/general/acct_mgmt/mounts.yml
 
     - include: tasks/general/cron/ansible.yml
-    - include: tasks/general/cron/root.yml
+    
+    - include: tasks/freebsd/cron/ansible.yml
+      when: ansible_system == "FreeBSD"
 
 
 # Additional setup for systems with GUI.
diff --git a/tasks/freebsd/cron/ansible.yml b/tasks/freebsd/cron/ansible.yml
new file mode 100644
index 0000000..66f3c00
--- /dev/null
+++ b/tasks/freebsd/cron/ansible.yml
@@ -0,0 +1,20 @@
+---
+# Cron jobs specific to FreeBSD
+
+- name: FreeBSD | Cron | Ansible | Enable SSHFS Job
+  cron:
+    user: ansible
+    name: "1337 SSHFS"
+    special_time: reboot
+    job: "sudo {{ sshfs_leet_cmd }}"
+    state: present
+    disabled: no
+
+- name: FreeBSD | Cron | Ansible | Enable Security Update
+  cron:
+    user: ansible
+    name: "Security Update"
+    special_time: daily
+    job: "sudo freebsd-update cron"
+    state: present
+    disabled: no
\ No newline at end of file
diff --git a/tasks/general/cron/ansible.yml b/tasks/general/cron/ansible.yml
index 25a6f39..bc0425c 100644
--- a/tasks/general/cron/ansible.yml
+++ b/tasks/general/cron/ansible.yml
@@ -19,16 +19,6 @@
     state: present
     disabled: no
 
-- name: General | Cron | Ansible | Enable SSHFS Job (FreeBSD)
-  cron:
-    user: ansible
-    name: "1337 SSHFS"
-    special_time: reboot
-    job: "sudo {{ sshfs_leet_cmd }}"
-    state: present
-    disabled: no
-  when: ansible_system == "FreeBSD"
-
 - name: General | Cron | Ansible | Enable Secure Copy Reports
   cron: 
     user: ansible