diff --git a/config/50unattended-upgrades b/config/50unattended-upgrades
new file mode 100644
index 0000000..488ab8a
--- /dev/null
+++ b/config/50unattended-upgrades
@@ -0,0 +1,26 @@
+Unattended-Upgrade::Allowed-Origins {
+//	"${distro_id}:${distro_codename}";
+	"${distro_id}:${distro_codename}-security";
+	// Extended Security Maintenance; doesn't necessarily exist for
+	// every release and this system may not have it installed, but if
+	// available, the policy for updates is such that unattended-upgrades
+	// should also install from here by default.
+//      "${distro_id}ESM:${distro_codename}";
+//      "${distro_id}:${distro_codename}-updates";
+//      "${distro_id}:${distro_codename}-proposed";
+//      "${distro_id}:${distro_codename}-backports";
+};
+
+Unattended-Upgrade::Remove-Unused-Dependencies "true";
+//Set to true for automatic reboots after unattended upgrades
+Unattended-Upgrade::Automatic-Reboot "false";
+Unattended-Upgrade::Automatic-Reboot-Time "02:00";
+
+Unattended-Upgrade::Package-Blacklist {
+	"vim";
+	"mysql-server";
+	"mysql-client";
+	"libc6";
+	"libc6-dev";
+	"libc6-i686";
+};
\ No newline at end of file