Automatic security updates

Add to a guest

In the guest as root – container and VM alike:

update --add-modules unattended-upgrades

Runs a normal update and installs the module on the way.

From the Proxmox node, without logging in:

pct exec <ID> -- update --add-modules unattended-upgrades   # container
ssh root@<IP> update --add-modules unattended-upgrades

Choose when creating a guest

Without a dialog, on the Proxmox node:

IAC_NONINTERACTIVE=1 var_modules=auto-update,unattended-upgrades \
  bash -c "$(curl -fsSL https://iac.heyer.systems/<app>/ct.sh)"

var_modules replaces the app's preselection – keep auto-update in the list if you want it. Interactive: choose “advanced” in the dialog, or tick the module in the generator on the app page.

Remove

update --remove-modules unattended-upgrades

Removes the module's packages, services, firewall rules and configuration again. Data stays.