Add Debian unattended-upgrades configuration files for automatic security patch deployment: - 50unattended-upgrades: Main configuration specifying allowed origins (distro, security, ESM), package blacklist, cleanup settings for unused kernels/dependencies, syslog logging, and configurable reboot behavior - auto-upgrades: Enablement settings for the automatic update service This ensures servers receive security patches promptly without manual intervention, reducing the window of vulnerability. Related: KNELServerBuild/ProjectCode/Modules/Security/secharden-auto-upgrade.sh
8 lines
235 B
Plaintext
8 lines
235 B
Plaintext
// KNEL Auto-Upgrades Configuration
|
|
// Enable unattended-upgrades
|
|
|
|
APT::Periodic::Update-Package-Lists "1";
|
|
APT::Periodic::Unattended-Upgrade "1";
|
|
APT::Periodic::Download-Upgradeable-Packages "1";
|
|
APT::Periodic::AutocleanInterval "7";
|