diff --git a/roles/bootstrap/tasks/dnf.yml b/roles/bootstrap/tasks/dnf.yml
index 48fbca9..f8ecaeb 100644
--- a/roles/bootstrap/tasks/dnf.yml
+++ b/roles/bootstrap/tasks/dnf.yml
@@ -19,6 +19,7 @@
   with_items:
     - { regexp: '^upgrade_type.=', line: 'upgrade_type = security' }
     - { regexp: '^emit_via.=', line: 'emit_via = stdio' }
+    - { regexp: '^apply_updates.=', line: 'apply_updates = yes' }
 
 - name: enable dnf-automatic timer
   systemd: