diff --git a/roles/zoneminder/handlers/main.yml b/roles/zoneminder/handlers/main.yml
new file mode 100644
index 0000000..856053e
--- /dev/null
+++ b/roles/zoneminder/handlers/main.yml
@@ -0,0 +1,5 @@
+---
+- name: restart zoneminder
+  service:
+    name: zoneminder
+    state: restarted
diff --git a/roles/zoneminder/meta/main.yml b/roles/zoneminder/meta/main.yml
new file mode 100644
index 0000000..cb6ec33
--- /dev/null
+++ b/roles/zoneminder/meta/main.yml
@@ -0,0 +1,5 @@
+---
+dependencies:
+  - {role: apache}
+  - {role: mariadb}
+  - {role: rpmfusion-free-repo}
diff --git a/roles/zoneminder/tasks/main.yml b/roles/zoneminder/tasks/main.yml
new file mode 100644
index 0000000..80a7908
--- /dev/null
+++ b/roles/zoneminder/tasks/main.yml
@@ -0,0 +1,63 @@
+---
+- name: fix selinux contexts from cache directory
+  sefcontext:
+    path: "/var/cache/zoneminder(/.*)?"
+    setype: httpd_cache_t
+
+- name: install packages
+  package:
+    name: zoneminder-httpd
+    state: installed
+
+- name: create config
+  template:
+    dest: /etc/zm/conf.d/local.conf
+    src: zm.conf
+    mode: 0640
+    owner: root
+    group: apache
+  notify: restart zoneminder
+
+# selinux doesn't allow create this
+- name: create stub web log
+  file:
+    dest: /var/log/zoneminder/web_php.log
+    state: touch
+    mode: 0640
+    owner: apache
+    group: apache
+    access_time: preserve
+    modification_time: preserve
+
+- name: link apache config
+  file:
+    dest: /etc/httpd/conf.local.d/zm.conf
+    src: /etc/zm/www/zoneminder.httpd.conf
+    state: link
+    owner: root
+    group: "{{ ansible_wheel }}"
+  notify: restart apache
+
+- name: link apache php config
+  file:
+    dest: /etc/httpd/conf.local.d/php.conf
+    src: /etc/httpd/conf.d/php.conf
+    state: link
+    owner: root
+    group: "{{ ansible_wheel }}"
+  notify: restart apache
+
+- name: configure zoneminder timezone
+  copy:
+    dest: /etc/php.d/timezone.ini
+    content: "date.timezone=UTC\n"
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"
+  notify: restart apache
+
+- name: enable service
+  service:
+    name: zoneminder
+    state: started
+    enabled: true
diff --git a/roles/zoneminder/templates/zm.conf b/roles/zoneminder/templates/zm.conf
new file mode 100644
index 0000000..43ac372
--- /dev/null
+++ b/roles/zoneminder/templates/zm.conf
@@ -0,0 +1,6 @@
+# {{ ansible_managed }}
+
+ZM_DB_HOST=localhost
+ZM_DB_NAME=zm
+ZM_DB_USER=zmuser
+ZM_DB_PASS={{ zm_mysql_zmuser_pass }}