This is a common playbook that enables auto-updates

Useful for long lived simple boxes where you want to track security
updates and have users on the machine

playbooks/edx-east/common_with_security.yml

+- name: Deploy common
+  hosts: all
+  become: True
+  gather_facts: True
+  vars:
+    SECURITY_UNATTENDED_UPGRADES: true
+    COMMON_SECURITY_UPDATES: true
+  roles:
+    - common