I don’t use Cockpit, I just followed the Debian wiki guide to enabling unattended upgrades. As fast as I remember you have to apt install something and change a few lines in the config file.

It’s also good to have SMTP set up, so your server will notify you when something happens, you can configure what exactly.