I'd recommend a distro designed for server use, like CentOS. You'll find its packages are a little out of date because they are well tested and known to be stable. The default install is hardened and security updates are prompt. Also automatic updates are pre-configured and just need to be enabled.