Unattended-Upgrade::Origins-Pattern {
        "origin=Debian,codename=${os_release},label=Debian";
        "origin=Debian,codename=${os_release},label=Debian-Security";

% if node_has_backports:
        "a=${os_release}-backports,n=${os_release}-backports";
% endif

        // External packages
% for item in sorted(data.get('origins', set())):
        "${item}";
% endfor
};

Unattended-Upgrade::AutoFixInterruptedDpkg "true";
Unattended-Upgrade::MinimalSteps "false";

% if data.get('mail', None):
Unattended-Upgrade::Mail "${data['mail']}";
Unattended-Upgrade::MailOnlyOnError "false";
% endif

Unattended-Upgrade::Remove-Unused-Kernel-Packages "true";
Unattended-Upgrade::Remove-New-Unused-Dependencies "true";
Unattended-Upgrade::Remove-Unused-Dependencies "true";

% if data.get('reboot', True):
Unattended-Upgrade::Automatic-Reboot "true";
% else:
Unattended-Upgrade::Automatic-Reboot "false";
% endif