diff --git a/roles/common/tasks/packages.yml b/roles/common/tasks/packages.yml
index 5665569..c3527db 100644
--- a/roles/common/tasks/packages.yml
+++ b/roles/common/tasks/packages.yml
@@ -36,8 +36,6 @@
           - tmux
           - vim
           - whois
-    - name: remove basic packages
-      ansible.builtin.apt: state=absent name=unattended-upgrades
     - name: autoremove
       ansible.builtin.apt: autoremove=yes purge=yes
     - name: autoclean
diff --git a/roles/desktop/defaults/main.yml b/roles/desktop/defaults/main.yml
index 14ecd7c..aaf35b5 100644
--- a/roles/desktop/defaults/main.yml
+++ b/roles/desktop/defaults/main.yml
@@ -165,7 +165,6 @@ desktop_flatpak_packages:
       - com.obsproject.Studio
       - net.minetest.Minetest
       - org.DolphinEmu.dolphin-emu
-      - org.getmonero.Monero
       - org.mozilla.firefox
   - remote: flathub-beta
     packages:
diff --git a/roles/desktop/tasks/main.yml b/roles/desktop/tasks/main.yml
index 192ad17..bcebedd 100644
--- a/roles/desktop/tasks/main.yml
+++ b/roles/desktop/tasks/main.yml
@@ -16,3 +16,5 @@
   alternatives: name=default.plymouth path=/usr/share/plymouth/themes/bgrt/bgrt.plymouth
   notify: regen initramfs
   when: ansible_os_family != "Gentoo"
+- name: ensure unattended-upgrades is installed
+  ansible.builtin.apt: name=unattended-upgrades state=present