diff --git a/lmn-client.yml b/lmn-client.yml
index d53dbf6..6cd9576 100644
--- a/lmn-client.yml
+++ b/lmn-client.yml
@@ -37,6 +37,12 @@
           /srv/samba/schools/default-school/students/*/
           /srv/samba/schools/default-school/examusers/
         vtype: string
+    - name: Preseed unattended-upgrades
+      debconf:
+        name: unattended-upgrades
+        question: unattended-upgrades/enable_auto_updates
+        value: true
+        vtype: boolean
 
   vars_files: lmn-vault
   vars:
@@ -70,6 +76,7 @@
       - mc
       - tmux
       - krb5-user
+      - unattended-upgrades
       - debconf-utils
     extra_pkgs_bpo: [] # [ linux-image-amd64 ]
 
@@ -197,7 +204,6 @@
     - name: Remove packages we do not need anymore
       ansible.builtin.apt:
         name:
-          - unattended-upgrades
           - cachefilesd
           - mosquitto
         state: absent
diff --git a/roles/lmn_fvs/tasks/main.yml b/roles/lmn_fvs/tasks/main.yml
index af45d47..37aecd9 100644
--- a/roles/lmn_fvs/tasks/main.yml
+++ b/roles/lmn_fvs/tasks/main.yml
@@ -132,6 +132,12 @@
         "ProxyMode": "auto_detect"
       }
 
+- name: Update all packages unattended
+  ansible.builtin.replace:
+    path: /etc/apt/apt.conf.d/50unattended-upgrades
+    regexp: '^//(\s+"origin=.+-updates";)$'
+    replace: '  \1'
+
 - name: Copy some scripts
   copy:
     src: "{{ item }}"