diff --git a/playbooks/mqtt.yml b/playbooks/mqtt.yml
index 6c7eea6..1a37f6e 100644
--- a/playbooks/mqtt.yml
+++ b/playbooks/mqtt.yml
@@ -12,6 +12,7 @@
   roles:
     - base
     - mosquitto
+    - telegraf
     - nginx/server
     - role: nginx/site
       site: iot.foo.sh
diff --git a/roles/telegraf/handlers/main.yml b/roles/telegraf/handlers/main.yml
new file mode 100644
index 0000000..5e4094e
--- /dev/null
+++ b/roles/telegraf/handlers/main.yml
@@ -0,0 +1,5 @@
+---
+- name: Restart telegraf
+  ansible.builtin.service:
+    name: telegraf
+    state: restarted
diff --git a/roles/telegraf/tasks/main.yml b/roles/telegraf/tasks/main.yml
new file mode 100644
index 0000000..068f1a4
--- /dev/null
+++ b/roles/telegraf/tasks/main.yml
@@ -0,0 +1,21 @@
+---
+
+- name: Install packages
+  ansible.builtin.package:
+    name: telegraf
+    state: installed
+
+- name: Copy config
+  ansible.builtin.copy:
+    dest: /etc/telegraf/telegraf.conf
+    src: "{{ ansible_private }}/files/telegraf/telegraf.conf"
+    mode: 0640
+    owner: root
+    group: _telegraf
+  notify: Restart telegraf
+
+- name: Enable service
+  ansible.builtin.service:
+    name: telegraf
+    enabled: true
+    state: started