diff --git a/playbooks/infrastructure/debian_update.yml b/playbooks/infrastructure/debian_update.yml
new file mode 100644
index 0000000..e1dbf89
--- /dev/null
+++ b/playbooks/infrastructure/debian_update.yml
@@ -0,0 +1,6 @@
+---
+- name: Update Debian packages
+  hosts: all
+  become: yes
+  roles:
+    - debian_update
diff --git a/roles/infrastructure/debian_update/meta/main.yml b/roles/infrastructure/debian_update/meta/main.yml
new file mode 100644
index 0000000..c5e7d7f
--- /dev/null
+++ b/roles/infrastructure/debian_update/meta/main.yml
@@ -0,0 +1,11 @@
+---
+galaxy_info:
+  author: Kevin M. Thompson (phlux)
+  description: Update all packages on Debian systems
+  license: MIT
+  min_ansible_version: 2.9
+  platforms:
+    - name: Debian
+      versions:
+        - all
+dependencies: []
diff --git a/roles/infrastructure/debian_update/tasks/main.yml b/roles/infrastructure/debian_update/tasks/main.yml
new file mode 100644
index 0000000..0cc1c20
--- /dev/null
+++ b/roles/infrastructure/debian_update/tasks/main.yml
@@ -0,0 +1,11 @@
+---
+- name: Update apt cache
+  ansible.builtin.apt:
+    update_cache: yes
+    cache_valid_time: 3600
+
+- name: Upgrade all packages to latest
+  ansible.builtin.apt:
+    upgrade: dist
+    autoremove: yes
+    autoclean: yes