diff --git a/site-modules/profile/manifests/unattended_upgrades.pp b/site-modules/profile/manifests/unattended_upgrades.pp
index 6bc659c26fe409d442ca5b6921ac7eb7f48ecdb6..0c8b71ef8c299c9f5b668923b645e09bf93d8397 100644
--- a/site-modules/profile/manifests/unattended_upgrades.pp
+++ b/site-modules/profile/manifests/unattended_upgrades.pp
@@ -29,8 +29,11 @@ class profile::unattended_upgrades {
       origins                => [
         # lint:ignore:single_quote_string_with_variables
         'origin=Debian,codename=${distro_codename},label=Debian',
-        'origin=Debian,codename=${distro_codename}-updates',
         'origin=Debian,codename=${distro_codename},label=Debian-Security',
+        # bullseye (and later?)
+        'origin=Debian,codename=${distro_codename}-security,label=Debian-Security',
+        # for buster and earlier
+        'origin=Debian,codename=${distro_codename}-updates',
         # lint:endignore
       ],
       blacklist              => [