diff --git a/roles/server-basic/templates/apt-50unattended-upgrades.j2 b/roles/server-basic/templates/apt-50unattended-upgrades.j2
index b8c64f7..9eff5eb 100644
--- a/roles/server-basic/templates/apt-50unattended-upgrades.j2
+++ b/roles/server-basic/templates/apt-50unattended-upgrades.j2
@@ -37,6 +37,8 @@ Unattended-Upgrade::Origins-Pattern {
         "origin=Debian,codename=${distro_codename},archive=stable-updates";
         "origin=Debian,codename=${distro_codename},archive=proposed-updates";
         "origin=Debian,codename=${distro_codename},label=Debian-Security";
+        "origin=Freifunk MWU,codename=${distro_codename},label=Freifunk MWU";
+        "origin=nginx,codename=${distro_codename},label=nginx,archive=stable";
 };
 
 // List of packages to not update (regexp are supported)