diff --git a/setup/start.sh b/setup/start.sh
index 7853371b9..601c503c6 100755
--- a/setup/start.sh
+++ b/setup/start.sh
@@ -173,6 +173,9 @@ ln -sfF "${PLATFORM_DATA_DIR}/collectd" /etc/collectd
 cp "${script_dir}/start/collectd.conf" "${PLATFORM_DATA_DIR}/collectd/collectd.conf"
 systemctl restart collectd
 
+echo "==> Adding motd message for admins"
+cp "${script_dir}/start/cloudron-motd" /etc/update-motd.d/92-cloudron
+
 echo "==> Configuring nginx"
 # link nginx config to system config
 unlink /etc/nginx 2>/dev/null || rm -rf /etc/nginx
diff --git a/setup/start/cloudron-motd b/setup/start/cloudron-motd
new file mode 100755
index 000000000..e0202b636
--- /dev/null
+++ b/setup/start/cloudron-motd
@@ -0,0 +1,9 @@
+#!/bin/sh
+# motd hook to remind admins about updates
+printf "\t\t\tNOTE TO CLOUDRON ADMINS\n"
+printf "\t\t\t-----------------------\n"
+printf "Please do not run apt upgrade manually as it will update packages that\n"
+printf "Cloudron relies on and may break your installation. Ubuntu security updates\n"
+printf "are automatically installed on this server every night.\n"
+printf "\n"
+printf "Read more at https://cloudron.io/documentation/security/#os-updates\n"