diff --git a/defaults/main.yaml b/defaults/main.yaml
index d71b147..530d499 100644
--- a/defaults/main.yaml
+++ b/defaults/main.yaml
@@ -13,6 +13,10 @@ apt_repository: "https://archive.ubuntu.com/ubuntu"
 apt_repository_main: "https://archive.ubuntu.com/ubuntu"
 apt_repository_security: "https://archive.ubuntu.com/ubuntu"
 
+# debian repository url
+debian_repo_url_security: "https://security.debian.org/debian-security"
+debian_repo_url_update: "https://deb.debian.org/debian"
+
 # firewall
 firewall_enable: true
 firewall_basic_rules:
diff --git a/templates/apt/sources.d/debian.sources.j2 b/templates/apt/sources.d/debian.sources.j2
new file mode 100644
index 0000000..a68e6cc
--- /dev/null
+++ b/templates/apt/sources.d/debian.sources.j2
@@ -0,0 +1,13 @@
+Types: deb deb-src
+URIs: {{ debian_repo_url_update }}
+Suites: {{ ansible_distribution_release }} {{ ansible_distribution_release }}-updates
+Components: main contrib non-free non-free-firmware
+Enabled: yes
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
+
+Types: deb deb-src
+URIs: {{ debian_repo_url_security }}
+Suites: {{ ansible_distribution_release }}-security
+Components: main contrib non-free non-free-firmware
+Enabled: yes
+Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg