diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..f4d737f
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    assignees:
+      - "angristan"
+    reviewers:
+      - "angristan"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 43ee65c..e3c5e63 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -7,19 +7,21 @@ on:
     - master
 
 name: Lint
+
 jobs:
   shellcheck:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v2
     - name: shellcheck
-      uses: ludeeus/action-shellcheck@0.0.1
+      uses: ludeeus/action-shellcheck@0.4.1
       env:
         SHELLCHECK_OPTS: -e SC1091,SC1117,SC2001
+
   shfmt:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@master
+    - uses: actions/checkout@v2
     - name: shfmt
       uses: bltavares/actions/shfmt@master
       env:
diff --git a/wireguard-install.sh b/wireguard-install.sh
index 2c8a154..26e0614 100644
--- a/wireguard-install.sh
+++ b/wireguard-install.sh
@@ -32,6 +32,14 @@ function checkOS() {
 		# shellcheck disable=SC1091
 		source /etc/os-release
 		OS="${ID}" # debian or ubuntu
+		if [[ -e /etc/debian_version ]]; then
+			if [[ $ID == "debian" || $ID == "raspbian" ]]; then
+				if [[ $VERSION_ID -ne 10 ]]; then
+					echo "Your version of Debian ($VERSION_ID) is not supported. Please use Debian 10 Buster"
+					exit 1
+				fi
+			fi
+		fi
 	elif [[ -e /etc/fedora-release ]]; then
 		# shellcheck disable=SC1091
 		source /etc/os-release
@@ -122,12 +130,13 @@ function installWireGuard() {
 		apt-get install -y "linux-headers-$(uname -r)"
 		apt-get install -y wireguard iptables resolvconf qrencode
 	elif [[ "${OS}" == 'debian' ]]; then
-		echo "deb http://deb.debian.org/debian/ unstable main" >/etc/apt/sources.list.d/unstable.list
-		printf 'Package: *\nPin: release a=unstable\nPin-Priority: 90\n' >/etc/apt/preferences.d/limit-unstable
+		if ! grep -rqs "^deb .* buster-backports" /etc/apt/; then
+			echo "deb http://deb.debian.org/debian buster-backports main" >/etc/apt/sources.list.d/backports.list
+			apt-get update
+		fi
 		apt update
-		apt-get install -y "linux-headers-$(uname -r)"
-		apt-get install -y wireguard iptables resolvconf qrencode
-		apt-get install -y bc # mitigate https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=956869
+		apt-get install -y iptables resolvconf qrencode
+		apt-get install -y -t buster-backports wireguard
 	elif [[ "${OS}" == 'fedora' ]]; then
 		if [[ "${VERSION_ID}" -lt 32 ]]; then
 			dnf install -y dnf-plugins-core