What about 'unattended-upgrades' in Debian?
This way you can configure to install automatically security (only security, or more) updates but I'd not configure it for automatic reboot on a promox box.
This way it will install all updates automatically and you get a notification via mail what...