diff --git a/ansible.cfg b/ansible.cfg
new file mode 100644
index 0000000..fb116af
--- /dev/null
+++ b/ansible.cfg
@@ -0,0 +1,9 @@
+[defaults]
+inventory = hosts
+roles_path = roles
+
+gathering = smart
+fact_caching = jsonfile
+fact_caching_connection = facts
+fact_caching_timeout = 86400
+
diff --git a/roles/ansible-host/tasks/main.yml b/roles/ansible-host/tasks/main.yml
index b2b192d..e74af48 100644
--- a/roles/ansible-host/tasks/main.yml
+++ b/roles/ansible-host/tasks/main.yml
@@ -12,6 +12,7 @@
     - ansible
     - git
     - libvirt-client
+    - python3-netaddr   # required by iptables role
     - virt-install
     - yamllint