diff --git a/roles/unattended-upgrades/files/20auto-upgrades b/roles/unattended-upgrades/files/20auto-upgrades
new file mode 100644
index 0000000..8d6d7c8
--- /dev/null
+++ b/roles/unattended-upgrades/files/20auto-upgrades
@@ -0,0 +1,2 @@
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";
diff --git a/roles/unattended-upgrades/tasks/main.json b/roles/unattended-upgrades/tasks/main.json
new file mode 100644
index 0000000..7706bc3
--- /dev/null
+++ b/roles/unattended-upgrades/tasks/main.json
@@ -0,0 +1,33 @@
+[
+  {
+    "name": "Allow unattended reboots (1)",
+    "lineinfile": {
+      "dest": "/etc/apt/apt.conf.d/50unattended-upgrades",
+      "regexp": "^(//)?Unattended-Upgrade::Automatic-Reboot ",
+      "line": "Unattended-Upgrade::Automatic-Reboot \"true\";"
+    }
+  },
+  {
+    "name": "Allow unattended reboots (2)",
+    "lineinfile": {
+      "dest": "/etc/apt/apt.conf.d/50unattended-upgrades",
+      "regexp": "^(//)?Unattended-Upgrade::Automatic-Reboot-Time ",
+      "line": "Unattended-Upgrade::Automatic-Reboot-Time \"23:55\";"
+    }
+  },
+  {
+    "name": "Allow more origins for updates",
+    "lineinfile": {
+      "dest": "/etc/apt/apt.conf.d/50unattended-upgrades",
+      "regexp": "^(//\\s*)?\"\\$\\{distro_id\\}:\\$\\{distro_codename\\}-updates\";",
+      "line": "\"${distro_id}:${distro_codename}-updates\";"
+    }
+  },
+  {
+    "name": "Enable unattended upgrades",
+    "copy": {
+      "src": "20auto-upgrades",
+      "dest": "/etc/apt/apt.conf.d/20auto-upgrades"
+    }
+  }
+]