diff --git a/playbooks/roles/system_update/handlers/main.yaml b/playbooks/roles/system_update/handlers/main.yaml
new file mode 100644
index 0000000..38e5810
--- /dev/null
+++ b/playbooks/roles/system_update/handlers/main.yaml
@@ -0,0 +1,5 @@
+# Reboot to apply potentially outstanding kernel updates and make sure all the
+# latest versions of libraries are used.
+- name: Reboot, if stuff changed, for good measure
+  ansible.builtin.reboot:
+  become: true
diff --git a/playbooks/roles/system_update/tasks/main.yaml b/playbooks/roles/system_update/tasks/main.yaml
new file mode 100644
index 0000000..6e68538
--- /dev/null
+++ b/playbooks/roles/system_update/tasks/main.yaml
@@ -0,0 +1,7 @@
+- name: Ensure the system is updated and no longer needed files are cleaned up
+  ansible.builtin.apt:
+    update_cache: true
+    upgrade: dist
+    autoclean: true
+  become: true
+  notify: Reboot, if stuff changed, for good measure