diff --git a/roles/nginx/templates/nginx_org_sources.list.j2 b/roles/nginx/templates/nginx_org_sources.list.j2
index 67e6f26..352a195 100644
--- a/roles/nginx/templates/nginx_org_sources.list.j2
+++ b/roles/nginx/templates/nginx_org_sources.list.j2
@@ -8,7 +8,16 @@ deb [arch=amd64] https://nginx.org/packages/mainline/ubuntu/ {{ ansible_distribu
 {% endif %}
 {% endif %}
 
-{% if ansible_distribution == 'Debian' %}
+{% if ansible_distribution == 'Debian' and ansible_distribution_release == 'buster' %}
+# there are no tarsnap packages for Debian 10 "buster" yet, so use Debian 9's
+{% if nginx_version == "stable" %}
+deb [arch=amd64] https://nginx.org/packages/debian/ stretch nginx
+{% elif nginx_version == "mainline" %}
+deb [arch=amd64] https://nginx.org/packages/mainline/debian/ stretch nginx
+{% endif %}
+
+{# else, distribution is not Debian buster #}
+{% else %}
 {% if nginx_version == "stable" %}
 deb [arch=amd64] https://nginx.org/packages/debian/ {{ ansible_distribution_release }} nginx
 {% elif nginx_version == "mainline" %}