diff --git a/roles/base/tasks/main.yaml b/roles/base/tasks/main.yaml
index f7161ff..cc64edc 100644
--- a/roles/base/tasks/main.yaml
+++ b/roles/base/tasks/main.yaml
@@ -10,6 +10,7 @@
         - htop
         - ncdu
         - gpg
+        - unattended-upgrades
 
 - name: Ensure Opt dir exists and accessible
   file:
@@ -72,3 +73,10 @@
   with_items:
     - daemon.conf
     - syslog.conf
+
+- name: Template Unattended Upgrade conf
+  template:
+    src: "{{ item }}"
+    dest: "/etc/apt/apt.conf.d/"
+  with_items:
+    - 20auto-upgrades.conf
diff --git a/roles/base/templates/20auto-upgrades.conf b/roles/base/templates/20auto-upgrades.conf
new file mode 100644
index 0000000..8d6d7c8
--- /dev/null
+++ b/roles/base/templates/20auto-upgrades.conf
@@ -0,0 +1,2 @@
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";