diff --git a/roles/sysutils/tasks/main.yml b/roles/sysutils/tasks/main.yml
index 6dcec766ef54f42e8b65e9e541700d022f243369..80bbda98bffa03fdf5f1979d45949af4fca218c1 100644
--- a/roles/sysutils/tasks/main.yml
+++ b/roles/sysutils/tasks/main.yml
@@ -12,6 +12,13 @@
     install_recommends: false
     name: ubicast-config
 
+- name: enable unattended upgrades
+  copy:
+    dest: /etc/apt/apt.conf.d/20auto-upgrades
+    content: |
+      APT::Periodic::Update-Package-Lists "1";
+      APT::Periodic::Unattended-Upgrade "1";
+
 # FIREWALL
 
 - name: firewall