diff --git a/roles/common/defaults/main.yml b/roles/common/defaults/main.yml
new file mode 100644
index 0000000..9b38866
--- /dev/null
+++ b/roles/common/defaults/main.yml
@@ -0,0 +1,3 @@
+---
+apt_update_cache: true
+apt_upgrade: true
diff --git a/roles/common/files/sources.list b/roles/common/files/sources.list
new file mode 100644
index 0000000..5d35a15
--- /dev/null
+++ b/roles/common/files/sources.list
@@ -0,0 +1,14 @@
+deb https://deb.debian.org/debian/ trixie contrib main non-free non-free-firmware
+# deb-src https://deb.debian.org/debian/ trixie contrib main non-free non-free-firmware
+
+deb https://deb.debian.org/debian/ trixie-updates contrib main non-free non-free-firmware
+# deb-src https://deb.debian.org/debian/ trixie-updates contrib main non-free non-free-firmware
+
+deb https://deb.debian.org/debian/ trixie-proposed-updates contrib main non-free non-free-firmware
+# deb-src https://deb.debian.org/debian/ trixie-proposed-updates contrib main non-free non-free-firmware
+
+deb https://deb.debian.org/debian/ trixie-backports contrib main non-free non-free-firmware
+# deb-src https://deb.debian.org/debian/ trixie-backports contrib main non-free non-free-firmware
+
+deb https://security.debian.org/debian-security/ trixie-security contrib main non-free non-free-firmware
+# deb-src https://security.debian.org/debian-security/ trixie-security contrib main non-free non-free-firmware
diff --git a/roles/common/tasks/main.yml b/roles/common/tasks/main.yml
index 7b3ea38..1f74240 100644
--- a/roles/common/tasks/main.yml
+++ b/roles/common/tasks/main.yml
@@ -4,6 +4,27 @@
     update_cache: true
     cache_valid_time: 3600
 
+- name: Déployer /etc/apt/sources.list
+  ansible.builtin.copy:
+    src: files/sources.list
+    dest: /etc/apt/sources.list
+    owner: root
+    group: root
+    mode: '0644'
+    backup: yes
+  notify: apt update
+
+- name: Mettre à jour le cache APT
+  ansible.builtin.apt:
+    update_cache: yes
+  when: apt_update_cache
+
+- name: Mettre à jour tous les paquets
+  ansible.builtin.apt:
+    upgrade: dist
+  when: apt_upgrade
+
+
 - name: Paquets de base
   ansible.builtin.apt:
     name: