diff --git a/group_vars/moin.yml b/group_vars/moin.yml
new file mode 100644
index 0000000..e745826
--- /dev/null
+++ b/group_vars/moin.yml
@@ -0,0 +1,7 @@
+---
+datadisks:
+  - 10
+
+firewall_in:
+  - {proto: tcp, port: 22, from: [172.20.20.0/22]}
+  - {proto: tcp, port: 443, from: [172.20.20.0/22]}
diff --git a/host_vars/moin01.home.foo.sh.yml b/host_vars/moin01.home.foo.sh.yml
new file mode 100644
index 0000000..aeecefb
--- /dev/null
+++ b/host_vars/moin01.home.foo.sh.yml
@@ -0,0 +1,6 @@
+---
+vmhost: vmhost01.home.foo.sh
+network_interfaces:
+  - device: eth0
+    vlan: 20
+    mac: 52:54:00:ac:dc:2b
diff --git a/hosts b/hosts
index 1dc9cc2..16a28f9 100644
--- a/hosts
+++ b/hosts
@@ -4,6 +4,9 @@ adm01.home.foo.sh
 [mirror]
 mirror01.home.foo.sh
 
+[moin]
+moin01.home.foo.sh
+
 [git]
 git02.home.foo.sh
 
@@ -28,6 +31,7 @@ adm
 git
 ldap
 mirror
+moin
 
 [openbsd:children]
 gw
diff --git a/playbooks/moin.yml b/playbooks/moin.yml
new file mode 100644
index 0000000..8bfd9d3
--- /dev/null
+++ b/playbooks/moin.yml
@@ -0,0 +1,24 @@
+---
+- import_playbook: "include/vm-create.yml myhosts=moin01.home.foo.sh"
+
+- name: configure instance
+  hosts: moin
+  user: root
+  gather_facts: true
+
+  vars_files:
+    - "{{ ansible_private }}/vars.yml"
+
+  pre_tasks:
+    - name: mount /export
+      mount:
+        name: /export
+        src: LABEL=/export
+        fstype: xfs
+        opts: noatime,noexec,nosuid,nodev
+        passno: "0"
+        dump: "0"
+        state: mounted
+
+  roles:
+    - base