@metadata_processor
def nginx_apt_repo(metadata):
    return {
        'apt': {
            'repos': {
                'nginx': {
                    'key': '573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62',
                    'items': [
                        'deb http://nginx.org/packages/debian buster nginx',
                    ],
                },
            },
            'unattended-upgrades': {
                'sites': {
                    'nginx.org',
                },
            },
        },
    }, DEFAULTS, DONE