Commit 1fcc4381f7f9

@@ -26,6 +26,28 @@ log_error() {
 
 # TODO: config.txt (diff with default, nvme, ...)
 
+setup.unattended_upgrades() {
+	log_info "Setup unattended-upgrades..."
+	sudo apt update && sudo apt install -y unattended-upgrades apt-listchanges
+
+	# Enable automatic updates
+	sudo tee /etc/apt/apt.conf.d/20auto-upgrades <<EOF
+APT::Periodic::Update-Package-Lists "1";
+APT::Periodic::Unattended-Upgrade "1";
+APT::Periodic::AutocleanInterval "7";
+EOF
+
+	# Configure unattended-upgrades
+	sudo tee /etc/apt/apt.conf.d/52unattended-upgrades-local <<EOF
+Unattended-Upgrade::Automatic-Reboot "true";
+Unattended-Upgrade::Automatic-Reboot-Time "04:00";
+Unattended-Upgrade::Remove-Unused-Dependencies "true";
+Unattended-Upgrade::Remove-New-Unused-Dependencies "true";
+EOF
+
+	log_info "Unattended-upgrades configured (auto-reboot at 04:00)"
+}
+
 setup.syncthing() {
 	log_info "Install syncthing..."
 	sudo apt update && sudo apt install gnupg2 curl apt-transport-https -y
@@ -95,6 +117,7 @@ EOF
 main() {
 	log_info "Starting Nagoya post-install setup..."
 
+	setup.unattended_upgrades
 	setup.wireguard
 	setup.docker
 	setup.kind