* for all hosts, use debops.unattended_upgrades * for docker compose, install a cron job pulling new images and restarting affected containers
docker
docker_compose
Do this in preparation for the keycloak deployment.