diff --git a/tasks/main.yml b/tasks/main.yml
index dee063869e9b3079ff2b491c8f291dc0c50d5779..4406687b4e1b572ddc50bb29030546892d4e1893 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -111,7 +111,8 @@
       owner: root
       group: root
       mode: '0644'
-  when: ansible_os_family == "Debian"
+  when: ansible_os_family == "Debian" and inventory_hostname in groups.full_maintenance
+  tags: unattended-upgrade
 
 - name: Copy Unattended Upgrades configuration
   ansible.builtin.template: