diff --git a/group_vars/nas.yml b/group_vars/nas.yml
new file mode 100644
index 0000000..510c3c2
--- /dev/null
+++ b/group_vars/nas.yml
@@ -0,0 +1,9 @@
+---
+
+mem_size: 4096
+num_cpus: 2
+datadisks:
+  - 1000
+
+firewall_in:
+  - {proto: tcp, port: 22, from: [172.20.20.0/22]}
diff --git a/host_vars/nas02.home.foo.sh b/host_vars/nas02.home.foo.sh
new file mode 100644
index 0000000..f9d6c36
--- /dev/null
+++ b/host_vars/nas02.home.foo.sh
@@ -0,0 +1,6 @@
+---
+vmhost: vmhost02.home.foo.sh
+network_interfaces:
+  - device: eth0
+    vlan: 20
+    mac: 52:54:00:ac:dc:34
diff --git a/hosts b/hosts
index 84c547a..6ff9f36 100644
--- a/hosts
+++ b/hosts
@@ -20,6 +20,9 @@ ldap02.home.foo.sh
 [log]
 log01.home.foo.sh
 
+[nas]
+nas02.home.foo.sh
+
 [ns]
 ns02.home.foo.sh
 atl01.vultr.foo.sh
@@ -36,6 +39,7 @@ atl01.vultr.foo.sh
 
 [centos8:children]
 adm
+nas
 vmhost
 
 [centos7:children]
diff --git a/playbooks/nas.yml b/playbooks/nas.yml
new file mode 100644
index 0000000..013f425
--- /dev/null
+++ b/playbooks/nas.yml
@@ -0,0 +1,14 @@
+---
+- import_playbook: "include/deploy-kvm-guest.yml myhosts=nas"
+
+- name: configure instance
+  hosts: nas
+  user: root
+  gather_facts: true
+
+  vars_files:
+    - "{{ ansible_private }}/vars.yml"
+
+  roles:
+    - base
+    - zfs