If you purchase a Debian server, then you should always have the latest security patches and updates, whether you’re asleep or not. This is pretty easy to do. Here’s how.<\/p>\n

Run this command to install the “unattended-upgrades” package, along with a package to identify the changes:<\/p>\n

sudo apt-get install unattended-upgrades apt-listchanges\r\n<\/code><\/pre>\n
After that is installed, then edit the unattended-upgrade configuration:<\/p>\n
sudo vim \/etc\/apt\/apt.conf.d\/50unattended-upgrades\r\n<\/code><\/pre>\n
Paste the following into this file after emptying it, then modify items with\u00a0** **<\/code>. Remember to remove the asterisks.<\/p>\n
APT::Periodic::Enable \"1\";\r\nAPT::Periodic::Update-Package-Lists \"1\";\r\nAPT::Periodic::AutocleanInterval \"7\";\r\nAPT::Periodic::Unattended-Upgrade \"1\";\r\nUnattended-Upgrade::Mail \"**YOUR_EMAIL_HERE**\";\r\n\r\n\/\/ Automatically upgrade packages from these (origin, archive) pairs\r\nUnattended-Upgrade::Allowed-Origins {\r\n\"${distro_id} stable\";\r\n\"${distro_id} ${distro_codename}-updates\";\r\n\"${distro_id} ${distro_codename}-security\";\r\n};\r\n\r\n\/\/ You can specify your own packages to NOT automatically upgrade here\r\nUnattended-Upgrade::Package-Blacklist {\r\n\/\/ \"nginx\";\r\n\/\/ \"php5-fpm\";\r\n};\r\n\r\nUnattended-Upgrade::Automatic-Reboot \"false\";\r\n<\/code><\/pre>\n
Install “apticron” to manage automatic execution of APT updates:<\/p>\n
sudo apt-get install apticron\r\n<\/code><\/pre>\n
Open\u00a0\/etc\/apticron\/apticron.conf<\/code>\u00a0and set the EMAIL variable to your email address, so you can receive the list of changes.<\/p>\n
EMAIL=\"**me@myemailprovider.com**\"\r\nDIFF_ONLY=\"1\"\r\nLISTCHANGES_PROFILE=\"apticron\"\r\nSYSTEM=\"**HOSTNAME.OF.SERVER**\"\r\nNOTIFY_HOLDS=\"0\"\r\nNOTIFY_NO_UPDATES=\"0\"\r\n<\/code><\/pre>\n
Open\u00a0\/etc\/apt\/listchanges.conf<\/code>\u00a0to configure APT to save the changes to a database:<\/p>\n
[apt]\r\nfrontend=pager\r\nemail_address=**me@myemailprovider.com**\r\nconfirm=0\r\nsave_seen=\/var\/lib\/apt\/listchanges.db\r\nwhich=news<\/code><\/pre>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","format":"standard","manualknowledgebasecat":[233,242],"manual_kb_tag":[367],"_links":{"self":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2604"}],"collection":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/comments?post=2604"}],"version-history":[{"count":1,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2604\/revisions"}],"predecessor-version":[{"id":2605,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb\/2604\/revisions\/2605"}],"wp:attachment":[{"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/media?parent=2604"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manualknowledgebasecat?post=2604"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/support.aklwebhost.com\/wp-json\/wp\/v2\/manual_kb_tag?post=2604"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}