diff --git a/roles/base/tasks/OpenBSD.yml b/roles/base/tasks/OpenBSD.yml
new file mode 100644
index 0000000..f2c8d61
--- /dev/null
+++ b/roles/base/tasks/OpenBSD.yml
@@ -0,0 +1,27 @@
+---
+
+- name: install packages
+  package:
+    name: "{{ item }}"
+    state: installed
+  with_items:
+    - iftop          # monitor interfaces
+    - vim--no_x11    # we need real vim
+
+- name: disable nightly cron noise
+  file:
+    name: "{{ item }}"
+    content: "VERBOSESTATUS=0\n"
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"
+  with_items:
+    - /etc/daily.local
+    - /etc/weekly.local
+    - /etc/monthly.local
+
+- name: disable unused services
+  service:
+    name: sndiod
+    enabled: false
+    state: stopped
diff --git a/roles/base/tasks/main.yml b/roles/base/tasks/main.yml
index d28c08b..cd9d465 100644
--- a/roles/base/tasks/main.yml
+++ b/roles/base/tasks/main.yml
@@ -8,7 +8,7 @@
     dest: "/etc/at.allow"
     mode: 0600
     owner: root
-    group: root
+    group: "{{ ansible_wheel }}"
 
 - name: install basic roles
   include_role: