diff --git a/site-cookbooks/kosmos-base/recipes/default.rb b/site-cookbooks/kosmos-base/recipes/default.rb
index 25673f6..e4c694c 100644
--- a/site-cookbooks/kosmos-base/recipes/default.rb
+++ b/site-cookbooks/kosmos-base/recipes/default.rb
@@ -29,6 +29,14 @@ include_recipe 'timezone_iii'
 include_recipe 'ntp'
 include_recipe 'kosmos-base::systemd_emails'
 
+node.override["apt"]["unattended_upgrades"]["allowed_origins"] = [
+  "${distro_id}:${distro_codename}-security",
+  "${distro_id}:${distro_codename}-updates"
+]
+node.override["apt"]["unattended_upgrades"]["mail"] = "ops@kosmos.org"
+node.override["apt"]["unattended_upgrades"]["syslog_enable"] = true
+include_recipe 'apt::unattended-upgrades'
+
 package 'mailutils'
 package 'mosh'