Install needrestart and run every night

profile/manifests/base/minimal.pp

@@ -14,6 +14,7 @@ class profile::base::minimal (
   include profile::apt
   include profile::systemd
   include profile::packages
+  include profile::needrestart
 
   if $manage_firewall {
     include profile::firewall

profile/manifests/needrestart.pp

+# Manage needrestart
+class profile::needrestart {
+  ensure_packages([ 'needrestart' ])
+
+  cron { 'needrestart restart auto':
+    command => '/usr/sbin/needrestart -r a',
+    minute  => 0,
+    hour    => 3,
+    user    => 'root',
+  }
+}