I SSH in and run an update manually, once a week. I’m not knowledgable and comfortable enough to let updates happen automatically. Not yet, anyway.