I'm in a situation where I have to deploy an ubuntu server for a Client (they do not have a Sysadmin), and it will serve as an HTTP API backend for an app.
The catch is that after the deployment they no longer allow me to have remote SSH access to it so if something breaks then they will ask me to go on-site to fix it (I prefer avoiding this scenario).
Lets assume the app is secure, and I'm only worried about vulnerabilities present in the system and Server application.
I've been managing quite a lot of ubuntu servers in the last 3 years, and only had a problem with auto update once.
Is it better to leave the server as is, or create a cronjob that updates everything weekly?
0 0 * * 6 (apt-get update && apt-get dist-upgrade -y && apt-get autoremove -y && reboot) > /tmp/autoupdate.log