Create a cookbook for system updates
Doing system updates isn't mandatory per say. We already handle automatic security updates by default. That said, it might be nice to do a small cookbook for anyone who wants to do system updates.
In practice, it's just running apt-get upgrade and then rebooting the server. But maybe we could have a few small precautions, explain that you can power off the machine and take a snapshot with Digital Ocean for example.
You could use debops.unattended_upgrades role (included by default in DebOps common playbook) to apply all pending package upgrades and reboot the server if needed automatically. It should be safe to do on a Debian Stable system, not sure about other distributions or releases though.
I'm a bit hesitant to do that by default. That said, it could be part of the guide as well! :smiley: