diff --git a/defaults/main.yml b/defaults/main.yml
new file mode 100644
index 0000000..25fb2cc
--- /dev/null
+++ b/defaults/main.yml
@@ -0,0 +1,2 @@
+update:
+  unattended: no
diff --git a/tasks/main.yml b/tasks/main.yml
index 4098025..401541a 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -1,4 +1,10 @@
 ---
+- name: setup unattended updates
+  apt:
+    name: unattended-upgrades
+    purge: yes
+    state: "{% if update.unattended %}present{% else %}absent{% endif %}"
+
 - name: update
   apt:
     update_cache: yes