disable unattended-upgrades on nfs-servers (or limit kernel installs)

Spotted that issue when we had high inode usage on nfs servers:

1. We don't automatically reboot nfs-servers with unattended-upgrades
2. Unattended upgrades install linux-image-X, linux-headers-X, linux-headers-X-generic and linux-cloud-tools-X for every kernel update, but we never switch to them anyways.
3. We accumulate 10-20 kernels before monitoring starts complaining about disk spaces and inode usages.

Completely disabling upgrades is probably a bad idea, but can we exclude linux-* packages to be installed during unattended upgrades?