// Managed by the transcoder-node .deb (packaging PRD P8).
// Auto-upgrades come ONLY from the OnyxPlay internal apt origin — a node must
// never auto-apply Debian's own upgrades (drivers/kernel are manual behind a CP
// drain). "origin=OnyxPlay" matches the aptly publish origin set by
// packaging/repo (H5) — keep the two in sync.
Unattended-Upgrade::Origins-Pattern {
        "origin=OnyxPlay";
};
// Never auto-reboot a media node; channel-safe restarts are operator-paced.
Unattended-Upgrade::Automatic-Reboot "false";
APT::Periodic::Update-Package-Lists "1";
APT::Periodic::Unattended-Upgrade "1";
