diff --git a/playbook.yaml b/playbook.yaml
new file mode 100644
index 0000000..72f1489
--- /dev/null
+++ b/playbook.yaml
@@ -0,0 +1,22 @@
+---
+
+# execute this role
+- name: "install and configure a container registry"
+  hosts: "all"
+  serial: 1
+  become: true
+  tasks:
+
+    # due to semaphore bug we need to do this ourselves
+    - name: "force-update requirements"
+      ansible.builtin.command:
+        cmd: "ansible-galaxy install -f -r roles/requirements.yml"
+      become: false
+      delegate_to: "localhost"
+      changed_when: false
+      failed_when: false
+
+    # execute the role
+    - name: "execute role: zot"
+      ansible.builtin.include_role:
+        name: "zot"
diff --git a/roles/requirements.yml b/roles/requirements.yml
new file mode 100644
index 0000000..67f53ec
--- /dev/null
+++ b/roles/requirements.yml
@@ -0,0 +1,6 @@
+---
+
+roles:
+  - name: "zot"
+    src: "https://gitlab.simoncor.net/ansible/role-zot.git"
+    scm: "git"