Have an agent do it and have it write out what it did to an md file as guidance for each update. To be fair though if you configure things correctly it should never break. Mine hasn't been broken in years.