* for all hosts, use debops.unattended_upgrades * for docker compose, install a cron job pulling new images and restarting affected containers
Stefan Bethke