diff --git a/roles/alpine/files/unattended-upgrade b/roles/alpine/files/unattended-upgrade
new file mode 100644
index 0000000..542c6ba
--- /dev/null
+++ b/roles/alpine/files/unattended-upgrade
@@ -0,0 +1,8 @@
+#!/bin/sh
+
+upgrade() {
+	echo "Starting upgrade on $(date)"
+	apk upgrade --update
+}
+
+upgrade >> /var/log/unattended-upgrade.log
diff --git a/roles/alpine/files/unattended-upgrade.logrotate b/roles/alpine/files/unattended-upgrade.logrotate
new file mode 100644
index 0000000..5ddf0ef
--- /dev/null
+++ b/roles/alpine/files/unattended-upgrade.logrotate
@@ -0,0 +1,3 @@
+/var/log/unattended-upgrade.log {
+	missingok
+}
diff --git a/roles/alpine/tasks/main.yml b/roles/alpine/tasks/main.yml
index a774893..95ca640 100644
--- a/roles/alpine/tasks/main.yml
+++ b/roles/alpine/tasks/main.yml
@@ -22,6 +22,7 @@
     name:
     - git
     - iproute2
+    - logrotate
     - nftables
     - procps
     - rsync
@@ -64,3 +65,15 @@
         name: qemu-guest-agent
         enabled: yes
         state: started
+
+- name: Install automatic upgrade script
+  copy:
+    dest: /etc/periodic/weekly/
+    src: unattended-upgrade
+    mode: 0755
+
+- name: Configure log rotation for automatic upgrades
+  copy:
+    dest: /etc/logrotate.d/unattended-upgrade
+    src: unattended-upgrade.logrotate
+    mode: 0644