diff --git a/ansible/roles/20-common-40-package-upgrades/defaults/main.yml b/ansible/roles/20-common-40-package-upgrades/defaults/main.yml
new file mode 100644
index 0000000..f0e54de
--- /dev/null
+++ b/ansible/roles/20-common-40-package-upgrades/defaults/main.yml
@@ -0,0 +1 @@
+apt_cache_max_age_second: '600'
diff --git a/ansible/roles/20-common-40-package-upgrades/tasks/40-packages.yml b/ansible/roles/20-common-40-package-upgrades/tasks/40-packages.yml
index fdda243..4f5ef79 100644
--- a/ansible/roles/20-common-40-package-upgrades/tasks/40-packages.yml
+++ b/ansible/roles/20-common-40-package-upgrades/tasks/40-packages.yml
@@ -1,6 +1,12 @@
-- name: 'Upgrade the OS (apt-get dist-upgrade)'
+- name: 'Update apt cache if older than {{apt_cache_max_age_second}}s'
   ansible.builtin.apt:
     update_cache: 'yes'
+    cache_valid_time: '{{ apt_cache_max_age_second }}'
+
+
+
+- name: 'Upgrade the OS (apt-get dist-upgrade)'
+  ansible.builtin.apt:
     upgrade: 'dist'