diff --git a/tasks/check.yml b/tasks/check.yml
index 15bfb72..a3804d9 100644
--- a/tasks/check.yml
+++ b/tasks/check.yml
@@ -1,3 +1,38 @@
 - name: lookup debian version
   shell: cat /etc/debian_version
-  register: debian_version
\ No newline at end of file
+  register: debian_version
+
+- name: outputs debian version
+  debug:
+    var: debian_version.stdout_lines
+
+- name: update apt cache
+  apt:
+    update_cache: yes
+
+- name: show updateable packages
+  shell: apt-get -s dist-upgrade | grep Inst
+  register: apt_upgrade_result
+  changed_when: false
+  failed_when: apt_upgrade_result.rc > 1
+
+- name: outputs updatable packages
+  debug:
+    var: apt_upgrade_result.stdout_lines
+  when: apt_upgrade_result.stdout_lines | length > 0
+
+- name: mark server as "restart required" if necessary
+  shell: "needrestart -b | grep -E 'NEEDRESTART-SESS|NEEDRESTART-SVC|NEEDRESTART-KSTA: 3'"
+  register: restart_needed
+  ignore_errors: yes
+  changed_when: false
+  failed_when: restart_needed.rc > 1
+  tags: 
+    - needrestart 
+    - restart
+
+- name: output "restart required"
+  debug:
+    var: restart_needed.stdout_lines
+  when: restart_needed.stdout_lines | length > 0
+  tags: needrestart
diff --git a/tasks/docker.yml b/tasks/docker.yml
new file mode 100644
index 0000000..f070fb5
--- /dev/null
+++ b/tasks/docker.yml
@@ -0,0 +1,7 @@
+- name: Perform Docker system prune
+  shell: docker system prune -f
+  register: docker_prune
+
+- name: outputs docker prune
+  debug:
+    var: docker_prune.stdout_lines
diff --git a/tasks/main.yml b/tasks/main.yml
index 53d8eaa..70bf691 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -1,8 +1,15 @@
-- name: dist upgrade software
-  tags: [apt]
-  apt:
-    autoremove: yes
-    update_cache: yes
-    cache_valid_time: 3600
-    state: latest
-    upgrade: dist
\ No newline at end of file
+- name: check server status
+  import_tasks: check.yml
+  tags: check
+
+- name: update packages
+  import_tasks: update.yml
+  tags: update
+
+- name: restart server if required
+  import_tasks: restart.yml
+  tags: restart
+
+- name: docker maintenance
+  import_tasks: docker.yml
+  tags: docker
diff --git a/tasks/restart.yml b/tasks/restart.yml
new file mode 100644
index 0000000..c43545a
--- /dev/null
+++ b/tasks/restart.yml
@@ -0,0 +1,13 @@
+- name: schedule restart randomly between 2-5 AM if necessary
+  shell: |
+    hour=$(shuf -i 2-5 -n 1)
+    minute=$(shuf -i 0-59 -n 1)
+    shutdown -r "$hour:$minute"
+    echo "restart scheduled for $hour:$minute"
+  when: restart_needed.stdout_lines | length > 0
+  register: restard_scheduled
+
+- name: output "restart schedule"
+  debug:
+    var: restard_scheduled.stdout_lines
+  when: restart_needed.stdout_lines | length > 0
diff --git a/tasks/update.yml b/tasks/update.yml
new file mode 100644
index 0000000..e2b5063
--- /dev/null
+++ b/tasks/update.yml
@@ -0,0 +1,8 @@
+- name: dist upgrade software
+  tags: [apt]
+  apt:
+    autoremove: yes
+    update_cache: yes
+    cache_valid_time: 3600
+    state: latest
+    upgrade: dist