cron-apt to the rescue…

only thing still manual are the firewall patches… not that brave yet.