I'll come through for you again:
List the servers in your inventory file, install the role, run the playbook. It takes three commands to not only upgrade all your servers today, but make sure they're always patched automatically in the future.
The only exception is if you install software outside of apt, but in that case it should have its own auto-update mechanism. My solution there is: don't do that.
Ansible Galaxy
