On Ubuntu, it's stupidly easy to enable automatic security updates. If you didn't do it in the installer:
sudo apt install unattended-upgrades
sudo dpkg-reconfigure unattended-upgrades
You can also make the server reboot automatically at a scheduled time by setting the following settings in /etc/apt/apt.conf.d/50unattended-upgrades
: