Install apticron and apt-listchanges, configure unattended upgrades.