diff --git a/roles/common/tasks/apt-minimal.yaml b/roles/common/tasks/apt-minimal.yaml
new file mode 100644
index 0000000..5fbbaa0
--- /dev/null
+++ b/roles/common/tasks/apt-minimal.yaml
@@ -0,0 +1,9 @@
+---
+
+- name: Configure auto-upgrades
+  ansible.builtin.template:
+    src: apt-minimal
+    dest: /etc/apt/apt.conf.d/20minimal
+    owner: root
+    group: root
+    mode: 0644
diff --git a/roles/common/tasks/node-exporter.yaml b/roles/common/tasks/node-exporter.yaml
index 448bae1..675e33c 100644
--- a/roles/common/tasks/node-exporter.yaml
+++ b/roles/common/tasks/node-exporter.yaml
@@ -1,7 +1,14 @@
 ---
 
-- name: Install or remove prometheus node-exporter
+- name: Install node-exporter
   ansible.builtin.apt:
     name: prometheus-node-exporter
-    state: "{% if node_exporter %}present{% else %}absent{% endif %}"
+    state: present
+  when: node_exporter
+
+- name: Remove node-exporter
+  ansible.builtin.apt:
+    name: prometheus-node-exporter
+    state: absent
     autoremove: yes
+  when: not node_exporter
diff --git a/roles/common/templates/apt-minimal b/roles/common/templates/apt-minimal
new file mode 100644
index 0000000..452a6e6
--- /dev/null
+++ b/roles/common/templates/apt-minimal
@@ -0,0 +1,4 @@
+# Managed by Ansible
+
+APT::Install-Recommends "0";
+APT::Install-Suggests "0";
diff --git a/roles/common/templates/apt.conf.j2 b/roles/common/templates/apt.conf.j2
index 7581cc8..714bac0 100644
--- a/roles/common/templates/apt.conf.j2
+++ b/roles/common/templates/apt.conf.j2
@@ -6,6 +6,3 @@ Acquire::http::Proxy "http://{{ proxy_host }}:{{ proxy_port }}/";
 
 # Don't download translation-files
 Acquire::Languages "none";
-
-APT::Install-Recommends "0";
-APT::Install-Suggests "0";