diff --git a/defaults/main.yml b/defaults/main.yml
index eb663f7..1a2586c 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -127,8 +127,9 @@ mysql_users: []
 # MariaDB
 # -------------------------------------
 mysql_mariadb_version: '10.1'
+mysql_mariadb_mirror_domain: "ftp.igh.cnrs.fr"
 # See: https://downloads.mariadb.org/mariadb/repositories
-mysql_mariadb_repository: "http://ftp.igh.cnrs.fr/pub/mariadb/repo/{{ mysql_mariadb_version }}/debian"
+mysql_mariadb_repository: "http://{{ mysql_mariadb_mirror_domain }}/pub/mariadb/repo/{{ mysql_mariadb_version }}/debian"
 mysql_mariadb_key_server: "keyserver.ubuntu.com"
 mysql_mariadb_key_ids: ['0xcbcb082a1bb943db', '0xf1656f24c74cd1d8']
 
diff --git a/tasks/install/mariadb/upstream.yml b/tasks/install/mariadb/upstream.yml
index 12ad702..63e0b54 100644
--- a/tasks/install/mariadb/upstream.yml
+++ b/tasks/install/mariadb/upstream.yml
@@ -1,13 +1,16 @@
 ---
 
-- name: APT | Install MariaDB key
+- name: APT_KEY | Install MariaDB key
   apt_key: keyserver="{{ mysql_mariadb_key_server }}" id={{ item }} state=present
   with_items: "{{ mysql_mariadb_key_ids }}"
 
-- name: APT | Add MariaDB repository
+- name: TEMPLATE | Deploy APT pinning (prevent upgrades from Debian)
+  template: src=etc/apt/preferences.d/95-mariadb.j2 dest=/etc/apt/preferences.d/95-mariadb
+
+- name: APT_REPOSITORY | Add MariaDB repository
   apt_repository: repo='deb {{ mysql_mariadb_repository }} {{ ansible_distribution_release }} main' state=present
 
-- name: APT | Add MariaDB (src) repository
+- name: APT_REPOSITORY | Add MariaDB (src) repository
   apt_repository: repo='deb-src {{ mysql_mariadb_repository }} {{ ansible_distribution_release }} main' state=present
   when: mysql_upstream_apt_src
 
diff --git a/templates/etc/apt/preferences.d/95-mariadb.j2 b/templates/etc/apt/preferences.d/95-mariadb.j2
new file mode 100644
index 0000000..740bae1
--- /dev/null
+++ b/templates/etc/apt/preferences.d/95-mariadb.j2
@@ -0,0 +1,6 @@
+# {{ ansible_managed }}
+
+Explanation: Prevent Debian upgrades on mariadb packages
+Package: *
+Pin: origin {{ mysql_mariadb_mirror_domain }}
+Pin-Priority: 1000