diff --git a/roles/repo/defaults/main.yml b/roles/repo/defaults/main.yml
new file mode 100644
index 0000000..f30abc3
--- /dev/null
+++ b/roles/repo/defaults/main.yml
@@ -0,0 +1,3 @@
+---
+crowdsec_apt_key_url: https://packagecloud.io/crowdsec/crowdsec/gpgkey
+crowdsec_apt_repo_base: https://packagecloud.io/crowdsec/crowdsec
diff --git a/roles/repo/tasks/main.yml b/roles/repo/tasks/main.yml
new file mode 100644
index 0000000..2549b1a
--- /dev/null
+++ b/roles/repo/tasks/main.yml
@@ -0,0 +1,13 @@
+---
+- name: Configure CrowdSec APT key
+  ansible.builtin.get_url:
+    url: "{{ crowdsec_apt_key_url }}"
+    path: /etc/apt/keyrings/crowdsec.asc
+    mode: '0644'
+    state: present
+
+- name: Configure CrowdSec repository
+  ansible.builtin.apt_repository:
+    name: crowdsec
+    repo: "deb [signed-by=/etc/apt/keyrings/crowdsec.asc] {{ crowdsec_apt_repo_base }}/{{ ansible_distribution | lower }} {{ ansible_distribution_release | lower }} main"
+    state: present