# Updates, services and disk

> Package updates, automatic security updates, system services, disk usage and safe cleanup.

## Updates

Security updates install automatically every day. When one needs a reboot (a new kernel, for example), the server reboots in the maintenance window at 04:30 server time; until then the overview shows **A reboot is required to finish updates**.

On **Updates** you can also update on demand:

- **Check for updates** lists pending packages with their installed and new versions and marks security updates.
- **Install security updates** or **Install all updates**.

On the **Servers** list, select several servers to check updates or install security updates on all of them at once.

## Services

**Services** lists the system services Zefily manages (web server, PHP-FPM, databases, Valkey, CrowdSec…) with their state and whether they start at boot. **Start**, **Stop**, **Restart**, **Enable** and **Disable** act on them. Services the system cannot run without are **Protected**.

## Disk

**Disk usage** finds what fills the disk: **Analyze** shows folder sizes one level at a time; click a folder to go deeper and **Up one level** to come back. Very large trees hit a time or file limit; the sizes shown are then lower bounds.

**Clean up** runs safe, fixed actions that only remove data the system no longer needs:

| Action | What it removes |
| --- | --- |
| Package cache | Downloaded `.deb` files (`apt-get clean`); packages download again when needed. |
| System journal | Shrinks the systemd journal to 200 MiB, oldest entries first. |
| Rotated logs | Old rotated logs in `/var/log` (`syslog.1`, `*.gz`); current logs stay. |

**Estimate** shows what each action frees before you **Clean up now**.

The [health score](/docs/server-overview) warns when a disk is 80% full and an alert opens at 90%.

---
Source: https://zefily.com/docs/updates-and-services
