diff --git a/tier-0/autoupdates.yaml b/tier-0/autoupdates.yaml
new file mode 100644
index 0000000..ce1b427
--- /dev/null
+++ b/tier-0/autoupdates.yaml
@@ -0,0 +1,11 @@
+# Enable automatic updates by default
+
+# Configuration for bootc
+postprocess:
+  - |
+    #!/usr/bin/env bash
+    set -euo pipefail
+    target=/usr/lib/systemd/system/default.target.wants
+    mkdir -p $target
+    set -x
+    ln -s ../bootc-fetch-apply-updates.service $target
diff --git a/tier-0/manifest.yaml b/tier-0/manifest.yaml
index cd649fc..053bbaf 100644
--- a/tier-0/manifest.yaml
+++ b/tier-0/manifest.yaml
@@ -54,6 +54,7 @@ include:
   - ostree.yaml
   - bootc-config.yaml
   - initramfs.yaml
+  - autoupdates.yaml
 
 packages:
   # Even in tier-0, we have this.  If you don't want SELinux today, you'll need
diff --git a/tier-1/autoupdates.yaml b/tier-1/autoupdates.yaml
new file mode 120000
index 0000000..9c9cbd1
--- /dev/null
+++ b/tier-1/autoupdates.yaml
@@ -0,0 +1 @@
+../tier-0/autoupdates.yaml
\ No newline at end of file